Medium severityNVD Advisory· Published Feb 14, 2025· Updated Aug 8, 2026

CVE-2025-1239

Description

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WatchGuard/Fireboxllm-fuzzy

Patches

Vulnerability mechanics

References

psirt.watchguard.com/CVE-2025-1239nvd
www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00002nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000