PT-2025-44775 · Unknown · Water Management System

Published 2025-11-03 · Updated 2025-11-07 · CVE-2025-63448

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0

Description The Water Management System version 1.0 is susceptible to Cross Site Scripting (XSS). The issue occurs in the /edit product.php?id=1 API endpoint. The id parameter is potentially vulnerable. XSS allows attackers to inject malicious scripts into web pages viewed by other users.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-63448

Affected Products

Water Management System

References · 5

• 🔥 https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63448 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63448 · Vendor Advisory
• https://t.me/CVEtracker/36429 · Telegram Post
• https://t.me/cveNotify/142151 · Telegram Post