Cross-Site Scripting Vulnerability in Access Point by Vendor

CVE-2025-52687

What is CVE-2025-52687?

This vulnerability allows an attacker with administrator credentials for the access point to execute malicious JavaScript within the context of the web traffic payload. This can lead to severe security implications, including session hijacking where attackers could impersonate legitimate users, and denial-of-service conditions affecting system availability. It is crucial for administrators to assess their security posture and apply necessary updates to mitigate the risks associated with this vulnerability.

References