CVE-2025-63447
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer.php.
Risk Assessment
Malicious script execution in a user's browser is possible, potentially leading to session theft or unauthorized actions.
Recommendation
Add input validation and output encoding in /add_customer.php and plan a software update.
Other vulnerabilities in Water Management System
See all- CVE-2025-63449Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /orders.php.
- CVE-2025-63448Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1. The vulnerability allows injection of malicious script.
- CVE-2025-63446Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php.
Original NVD description (English source)
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS