Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
bitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6126ec74-d522-45ff-aa03-07aad5fb75b9?source=cve - https://plugins.trac.wordpress.org/browser/customer-reviews-woocommerce/tags/5.78.1/includes/reviews/class-cr-reviews-list-table.php#L1033 - https://plugins.trac.wordpress.org/browser/customer-reviews-woocommerce/tags/5.78.1/includes/reviews/class-cr-reviews-list-table.php#L1073 - https://plugins.trac.wordpress.org/browser/customer-reviews-woocommerce/tags/5.78.1/includes/reviews/class-cr-reviews-list-table.php#L1052
CVE ID: CVE-2025-5721 State: PUBLISHED Published: 2025-06-06T04:00:17.054Z Last Updated: 2025-06-09T13:37:20.724Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/core/update_profile of the component Profile Setting Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional
t is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311241 - https://vuldb.com/?ctiid.311241 - https://vuldb.com/?submit.590569 - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md#field-1-email-field-in-profile-setting - https://www.sourcecodester.com/
CVE ID: CVE-2025-5722 State: PUBLISHED Published: 2025-06-06T04:31:06.058Z Last Updated: 2025-06-09T13:32:25.258Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /script/academic/terms of the component Add Academic Term. The manipulation of the argument Academic Term leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
oss site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311242 - https://vuldb.com/?ctiid.311242 - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md#field-2-academic-term-field-in-academic-terms-page - https://www.sourcecodester.com/
CVE ID: CVE-2025-5723 State: PUBLISHED Published: 2025-06-06T05:00:19.576Z Last Updated: 2025-06-09T13:31:59.756Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/academic/classes of the component Classes Page. The manipulation of the argument Class Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Addition
scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311243 - https://vuldb.com/?ctiid.311243 - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md#field-3-class-name-field-in-classes-page - https://www.sourcecodester.com/
CVE ID: CVE-2025-5724 State: PUBLISHED Published: 2025-06-06T05:31:05.615Z Last Updated: 2025-06-09T13:29:04.310Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /script/academic/subjects of the component Subjects Page. The manipulation of the argument Subject leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Add
ripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311244 - https://vuldb.com/?ctiid.311244 - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md#field-4-subject-field-in-subjects-page - https://www.sourcecodester.com/
CVE ID: CVE-2025-5725 State: PUBLISHED Published: 2025-06-06T05:31:07.519Z Last Updated: 2025-06-09T13:28:35.260Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/academic/grading-system of the component Grading System Page. The manipulation of the argument Remark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the
gument Remark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311245 - https://vuldb.com/?ctiid.311245 - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md#field-5-remark-field-in-grading-system-page - https://www.sourcecodester.com/
CVE ID: CVE-2025-5726 State: PUBLISHED Published: 2025-06-06T06:00:15.357Z Last Updated: 2025-06-06T15:59:33.536Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /script/academic/division-system of the component Division System Page. The manipulation of the argument Division leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi
Division leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311246 - https://vuldb.com/?ctiid.311246 - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md#field-6-division-field-in-division-system-page - https://www.sourcecodester.com/
CVE ID: CVE-2025-5727 State: PUBLISHED Published: 2025-06-06T06:31:05.700Z Last Updated: 2025-06-06T16:05:48.938Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/announcement of the component Announcement Page. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additi
ng. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311247 - https://vuldb.com/?ctiid.311247 - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md - https://github.com/0xEricTee/CVE/blob/main/Research/Stored_XSS.md#field-7-title-field-in-announcement-page - https://www.sourcecodester.com/
CVE ID: CVE-2025-5728 State: PUBLISHED Published: 2025-06-06T07:00:18.985Z Last Updated: 2025-06-09T13:17:08.804Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Open Source Clinic Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /manage_website.php. The manipulation of the argument website_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vuln
tiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311248 - https://vuldb.com/?ctiid.311248 - https://vuldb.com/?submit.590578 - https://github.com/mysq13/CVE/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-5729 State: PUBLISHED Published: 2025-06-06T07:00:20.748Z Last Updated: 2025-06-09T13:13:10.991Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Health Center Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Health Center Patient Record Management System 1.0. Affected is an unknown function of the file /birthing_record.php. The manipulation of the argument itr_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes:
e to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311250 - https://vuldb.com/?ctiid.311250 - https://vuldb.com/?submit.590590 - https://github.com/Thiasap/HCPMS_PHP_vulns/blob/main/sql%20injection%20in%20birthing_record.php.pdf - https://code-projects.org/
CVE ID: CVE-2025-5730 State: PUBLISHED Published: 2025-06-30T06:00:01.730Z Last Updated: 2025-06-30T18:50:31.178Z Vendors: Unknown Products: Contact Form Plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e1e7f423-f981-413c-a99a-e5927fc1cd0c/
CVE ID: CVE-2025-5731 State: PUBLISHED Published: 2025-06-26T21:28:59.501Z Last Updated: 2025-11-20T21:12:50.031Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Data Grid 8.5.4, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack Problem Types: CWE-209 Description: A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found. Additional Analyst Notes:
in a command string that may expose the data in an error message when a command is not found. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:10130 - https://access.redhat.com/security/cve/CVE-2025-5731 - https://bugzilla.redhat.com/show_bug.cgi?id=2370429
CVE ID: CVE-2025-5732 State: PUBLISHED Published: 2025-06-06T07:31:05.246Z Last Updated: 2025-06-09T13:12:37.581Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Traffic Offense Reporting System Problem Types: CWE-352, CWE-862 Description: A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311259
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311259 - https://vuldb.com/?ctiid.311259 - https://vuldb.com/?submit.590598 - https://github.com/tuooo/CVE/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-5733 State: PUBLISHED Published: 2025-06-06T03:41:23.431Z Last Updated: 2025-06-06T16:10:10.183Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: webnus/ Products: Modern Events Calendar Lite Problem Types: CWE-201 Description: The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 7.21.9. This is due improper or insufficient validation of the id property when exporting calendars. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its ow
l path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e545b53e-7054-41dc-b69b-7552ef6c3240?source=cve - https://wordpress.org/plugins/modern-events-calendar-lite/ - https://webnus.net/dox/modern-events-calendar/
CVE ID: CVE-2025-5734 State: PUBLISHED Published: 2025-06-06T07:31:09.074Z Last Updated: 2025-06-09T13:09:54.742Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311260 - https://vuldb.com/?ctiid.311260 - https://vuldb.com/?submit.590615 - https://github.com/byxs0x0/cve2/blob/main/cvee/1.md - https://www.totolink.net/
CVE ID: CVE-2025-5735 State: PUBLISHED Published: 2025-06-06T08:00:20.811Z Last Updated: 2025-06-09T13:09:32.492Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311261 - https://vuldb.com/?ctiid.311261 - https://vuldb.com/?submit.590619 - https://github.com/Lena-lyy/cve/blob/main/Goo/2.md - https://www.totolink.net/
CVE ID: CVE-2025-5736 State: PUBLISHED Published: 2025-06-06T08:00:24.119Z Last Updated: 2025-06-06T18:26:55.627Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311262 - https://vuldb.com/?ctiid.311262 - https://vuldb.com/?submit.590620 - https://github.com/Lena-lyy/cve/blob/main/Goo/3.md - https://www.totolink.net/
CVE ID: CVE-2025-5737 State: PUBLISHED Published: 2025-06-06T08:31:07.027Z Last Updated: 2025-06-09T13:09:12.263Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
aunched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311263 - https://vuldb.com/?ctiid.311263 - https://vuldb.com/?submit.590621 - https://github.com/Lena-lyy/cve/blob/main/Goo/4.md - https://www.totolink.net/
CVE ID: CVE-2025-5738 State: PUBLISHED Published: 2025-06-06T09:00:20.763Z Last Updated: 2025-06-09T13:08:45.224Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311264 - https://vuldb.com/?ctiid.311264 - https://vuldb.com/?submit.590635 - https://github.com/Lena-lyy/cve/blob/main/Goo/5.md - https://www.totolink.net/
CVE ID: CVE-2025-5739 State: PUBLISHED Published: 2025-06-06T09:00:24.134Z Last Updated: 2025-06-09T13:07:37.818Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311265 - https://vuldb.com/?ctiid.311265 - https://vuldb.com/?submit.590636 - https://github.com/Lena-lyy/cve/blob/main/Goo/6.md - https://www.totolink.net/
CVE ID: CVE-2025-5740 State: PUBLISHED Published: 2025-06-10T08:06:49.986Z Last Updated: 2025-10-07T03:27:41.387Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: EVLink WallBox Problem Types: CWE-22 Description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-03.pdf
CVE ID: CVE-2025-5741 State: PUBLISHED Published: 2025-06-10T08:09:21.392Z Last Updated: 2025-06-10T13:08:45.816Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Schneider Electric Products: EVLink WallBox Problem Types: CWE-22 Description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Securi
Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-03.pdf
CVE ID: CVE-2025-5742 State: PUBLISHED Published: 2025-06-10T08:11:55.330Z Last Updated: 2025-06-10T13:08:22.827Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Schneider Electric Products: EVLink WallBox Problem Types: CWE-79 Description: CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user modifies configuration parameters on the web server Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-03.pdf
CVE ID: CVE-2025-5743 State: PUBLISHED Published: 2025-06-10T08:15:42.268Z Last Updated: 2025-10-07T03:29:00.117Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N) Vendors: Schneider Electric Products: EVLink WallBox Problem Types: CWE-78 Description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Security+and+Safe
nt: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-03.pdf