https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:55:39 +0000 https://vulnerability.circl.lu/vuln/cve-2025-13902 <p><strong>Affected:</strong> Schneider Electric Modicon Controllers M241/M251, Schneider Electric Modicon Controllers M258/LMC058</p> <p>CWE-79 Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server containing the injected payload.</p> <p><strong>Affected:</strong> Schneider Electric Modicon Controllers M241/M251, Schneider Electric Modicon Controllers M258/LMC058</p> <p>CWE-79 Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server containing the injected payload.</p> https://vulnerability.circl.lu/vuln/cve-2025-13902