PT-2025-44773 · Unknown · Water Management System

Published 2025-11-03 · Updated 2025-11-10 · CVE-2025-63446

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0

Description Water Management System version 1.0 is susceptible to Cross Site Scripting (XSS) attacks. The issue is located in the /add vendor.php endpoint. The vulnerability allows for the injection of malicious scripts through this endpoint.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling or restricting access to the /add vendor.php endpoint until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-63446

Affected Products

Water Management System

References · 5

• 🔥 https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63446 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63446 · Vendor Advisory
• https://t.me/cveNotify/142300 · Telegram Post
• https://t.me/CVEtracker/36427 · Telegram Post