CVE-2025-0458 — Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting

CVE-2025-0458

Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting PUBLISHED

Description (CNA)

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
Virtual Computer / Vysual RH Solution	affected 2024.12.1

CWE

CWE-79, CWE-94

References

https://vuldb.com/?id.291475
https://vuldb.com/?ctiid.291475
https://vuldb.com/?submit.473865

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.