Security Advisory

CVE-2025-36748

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-13 08:16:23
Last updated 2025-12-16 11:02:11
Assigner DIVD
CVSS score 8.4
State PUBLISHED

Description

ShineLan-X contains a stored cross site scripting (XSS) vulnerability in the local configuration web server. The JavaScript code snippet can be inserted in the communication module’s settings center. This may allow attackers to force a legitimate user’s browser’s JavaScript engine to run malicious code.