Cross-site Scripting Vulnerability in Aida Computer's Hotel Guest Hotspot

CVE-2025-4763

What is CVE-2025-4763?

Aida Computer Information Technology Inc.'s Hotel Guest Hotspot contains a vulnerability that allows attackers to exploit improper input neutralization during web page generation. This leads to reflected cross-site scripting (XSS), whereby malicious scripts can be injected into trustworthy web applications, potentially compromising session data and user authentication. The vulnerability was not acknowledged by the vendor after they were contacted about its potential risks.

References