medium5.4

CVE-2026-12621

Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS.

Impact

Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0.

Affected products

Vendor	Product	Affected versions
Microchip	Gridtime 3000 Firmware	from 1.0r0.03 before 1.2r0.0

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-dom-xss