Stored Cross Site Scripting Vulnerability in ShineLan-X by ShineLan

CVE-2025-36748

What is CVE-2025-36748?

ShineLan-X is vulnerable to a stored cross site scripting (XSS) attack through its local configuration web server. Attackers can exploit this vulnerability by injecting a malicious JavaScript code snippet into the communication module’s settings center. When executed, this code can compromise a legitimate user's browser, allowing unauthorized manipulation and access to sensitive information. It is crucial for users of ShineLan-X to update to the latest version to safeguard against potential exploits.

References