CVE-2025-60314 – Configuroweb Sistema Web de Inventario Stored Cross-Site Scripting (XSS)

CVE ID : CVE-2025-60314

Published : Oct. 8, 2025, 2:15 p.m. | 21 minutes ago

Description : Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…