CVE-2025-1810: Pixsoft Vivaz Login Endpoint servlet cross site scripting
First published: Sun Mar 02 2025(Updated: )
A vulnerability was found in Pixsoft Vivaz 6.0.11. It has been classified as problematic. Affected is an unknown function of the file /servlet?act=login&submit=1&evento=0&pixrnd=0125021817031859360231 of the component Login Endpoint. The manipulation of the argument sistema leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pixsoft Vivaz |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-1810?
CVE-2025-1810 is classified as a problematic vulnerability affecting the Login Endpoint of Pixsoft Vivaz 6.0.11.
How do I fix CVE-2025-1810?
To fix CVE-2025-1810, it is recommended to update Pixsoft Vivaz to a patched version that addresses this vulnerability.
What component is affected by CVE-2025-1810?
CVE-2025-1810 affects the Login Endpoint functionality in Pixsoft Vivaz 6.0.11.
What interaction leads to the vulnerability in CVE-2025-1810?
The vulnerability in CVE-2025-1810 is exploited through the manipulation of the 'sistema' argument during the login process.
What are the potential consequences of CVE-2025-1810?
Exploitation of CVE-2025-1810 could lead to unauthorized access or manipulation of user data within Pixsoft Vivaz.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/source
- agent/last-modified-date
- agent/tags
- agent/event
- vendor/pixsoft
- canonical/pixsoft vivaz