CVE-2025-63446
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php.
Risk Assessment
An attacker can inject script that runs in the victim's browser, risking session hijacking and unauthorized operations.
Recommendation
Apply input validation and output encoding in /add_vendor.php and update or replace the vulnerable system.
Other vulnerabilities in Water Management System
See all- CVE-2025-63449Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /orders.php.
- CVE-2025-63448Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1. The vulnerability allows injection of malicious script.
- CVE-2025-63447Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer.php.
Original NVD description (English source)
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS