Medium severity5.4NVD Advisory· Published Jun 10, 2025· Updated Jun 17, 2026
CVE-2025-3905
CVE-2025-3905
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system variables that could cause an unvalidated data injected by authenticated malicious user leading to modify or read data in a victim’s browser.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.