PT-2025-33934 · Wen Solutions · Wen Solutions Notice Bar

Nabil Irawan

·

CVE-2025-49389

·

Publicado

2025-08-20

·

Atualizado

2025-08-20

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions: WEN Solutions Notice Bar versions through 3.1.3
Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Stored Cross-site Scripting (XSS). This allows for the injection of malicious scripts into web pages generated by the application.
Recommendations: Update WEN Solutions Notice Bar to a version later than 3.1.3.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-49389

Produtos afetados

Wen Solutions Notice Bar