medium6.1
CVE-2025-13939
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controlle…
Impact
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controller module) allows Stored XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Watchguard | Fireware | from 2025.1 before 2025.1.3 from 11.7.2 before 12.11.5 from 11.7.2 before 12.5.14 |