CVE-2025-40772: XSS
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnerable to stored Cross-Site Scripting (XSS), allowing an attacker to inject malicious code that can be executed by other users when they visit the affected page. Successful exploitation allows an attacker to impersonate other users within the application and steal their session data. This could enable unauthorized access to accounts and potentially lead to privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40772?
CVE-2025-40772 is classified as a stored Cross-Site Scripting (XSS) vulnerability which can allow attackers to execute malicious scripts on user sessions.
How do I fix CVE-2025-40772?
To fix CVE-2025-40772, upgrade the SiPass Integrated software to version 3.0 or later to eliminate the XSS vulnerability.
What software is affected by CVE-2025-40772?
CVE-2025-40772 affects all versions of SiPass Integrated prior to version 3.0.
What type of attack can be executed through CVE-2025-40772?
CVE-2025-40772 allows attackers to perform stored Cross-Site Scripting (XSS) attacks, potentially compromising user sessions.
Who should be concerned about CVE-2025-40772?
Organizations using SiPass Integrated versions lower than 3.0 should be concerned about CVE-2025-40772 due to the potential for XSS attacks.