Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-41406 EUVD-2025-16465GHSA-439f-cgjv-3g68

Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specifi…

Published May 30, 2025 · Updated May 30, 2025 · Assigned by jpcert

Description

Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user.

Affected products

VendorProductAffectedFixed
UCHIDA YOKO wivia 5 all versions —

References