CVE-2025-60314: XSS
Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60314?
CVE-2025-60314 has been classified as a high severity vulnerability due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2025-60314?
To fix CVE-2025-60314, ensure that input sanitization is properly implemented on the product name parameter to prevent malicious input.
Who is affected by CVE-2025-60314?
CVE-2025-60314 affects users of Configuroweb Sistema Web de Inventario version 1.0 who have not applied the necessary security measures.
What type of vulnerability is CVE-2025-60314?
CVE-2025-60314 is identified as a Stored Cross-Site Scripting (XSS) vulnerability.
What can attackers do with CVE-2025-60314?
Attackers can exploit CVE-2025-60314 to inject malicious payloads and execute arbitrary JavaScript within the context of an authenticated user session.