CVE-2025-63449
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /orders.php.
Risk Assessment
An attacker can execute arbitrary script in a user's browser, hijack sessions, or perform actions on behalf of logged-in users.
Recommendation
Implement input validation and output encoding in /orders.php and consider updating or replacing the vulnerable software.
Other vulnerabilities in Water Management System
See all- CVE-2025-63448Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1. The vulnerability allows injection of malicious script.
- CVE-2025-63447Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer.php.
- CVE-2025-63446Medium
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php.
Original NVD description (English source)
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /orders.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS