medium6.1
CVE-2025-41406
Cross-site scripting vulnerability exists in wivia 5 all versions.
Impact
Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Uchida | Wivia 5 Firmware | All versions |