Medium severity6.1NVD Advisory· Published Apr 22, 2025· Updated Jun 17, 2026

CVE-2025-43952

Description

A cross-site scripting (reflected XSS) vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 (440). It allows an attacker to inject malicious scripts via the IW_SessionID_ parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mettler Toledo/FreeWeight.Net Web Reports Viewerllm-fuzzy
Range: = 8.4.0 (440)

Patches

Vulnerability mechanics

References

github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43952nvd
www.mt.com/FreeWeighNetnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000