Unrated severityNVD Advisory· Published Nov 25, 2025· Updated Nov 26, 2025

CVE-2025-63735

Description

A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp.

Affected products

Ruckus/Unleasheddescription
WordPress/Lt Unleashedllm-fuzzy
Range: = 200.13.6.1.319
Package: https://wordpress.org/plugins/lt-unleashed

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.ruckusnetworks.com/products/network-control-and-management/controller-less/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000