CVE-2025-43924

n/a / n/a PUBLISHED

Description (CNA)

Cross Site Scripting vulnerability was discovered in Unicom Focal Point 7.6.1. The val parameter in SettingController (for /fp/admin/settings/loginpage) and the rootserviceurl parameter in FriendsController (for /fp/admin/settings/friends), entered by an admin, allow stored XSS.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.unicomsi.com/products/focal-point/
https://www.unicomsi.com/security-advisory/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.