NetSight
IP …
high8.7

CVE-2025-10558

A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script …

Impact

A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Affected products

VendorProductAffected versions
3ds3dswymer
Version r2025x

Weakness classification

CWE-79

References