PT-2025-33906

CVE-2025-9225

Published

2025-08-20

Updated

2025-11-05

CVSS 3.1

5.5

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: MiR software versions prior to 3.0.0

Description: Stored cross-site scripting in the web interface allows execution of arbitrary JavaScript code in a victim’s browser.

Recommendations: Update MiR software to version 3.0.0 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾