CVE-2025-57462

MediumCVSS 6.1

Published: 29/12/2025(UTC)Updated: 13/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Stored XSS vulnerability in MachPanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file.

An attacker can inject malicious script that executes in the browser of a logged-in user, potentially leading to session theft or account takeover.

Update MachPanel to the latest version and implement input filtering and sanitization for uploaded PDF files.

Original NVD description (English source)

Stored cross-site scripting (xss) in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS