CVE-2025-63448
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1. The vulnerability allows injection of malicious script.
Risk Assessment
An attacker could execute arbitrary JavaScript in the victim's browser, potentially leading to session or data theft.
Recommendation
Apply the fix or update the system to a version where the vulnerability is resolved. Until then, validate and sanitize input data.
Other vulnerabilities in Water Management System
See all- CVE-2025-63449Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /orders.php.
- CVE-2025-63447Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer.php.
- CVE-2025-63446Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php.
Original NVD description (English source)
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS