Medium severity6.1NVD Advisory· Published Jan 8, 2026· Updated Apr 15, 2026

CVE-2019-25270

Description

SOCA Access Control System 180612 contains a cross-site scripting vulnerability in the 'senddata' POST parameter of logged_page.php that allows attackers to inject malicious scripts. Attackers can exploit this weakness by sending crafted POST requests to execute arbitrary HTML and script code in a victim's browser session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Secure Access Control Systemllm-fuzzy
Range: 180612

Patches

Vulnerability mechanics

References

cxsecurity.com/issue/WLB-2019050151nvd
exchange.xforce.ibmcloud.com/vulnerabilities/160976nvd
packetstormsecurity.com/files/152837nvd
www.socatech.comnvd
www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5518.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000