CVE-2025-0458: Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-14 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Virtual Computer Vysual RH Solution: 2024.12.1

References

https://vuldb.com/?ctiid.291475
https://vuldb.com/?id.291475
https://vuldb.com/?submit.473865

Get alerted when CVE-2025-0458 or the next vulnerability affects your stack