XSS Vulnerability in Water Management System by Vendor
CVE-2025-63447

6.1MEDIUM

Key Information:

Vendor

Vendor

Status
Water Management System
Vendor
CVE Published:
3 November 2025

What is CVE-2025-63447?

The Water Management System version 1.0 is exposed to a Cross Site Scripting (XSS) vulnerability found in the /add_customer.php file. This flaw can allow attackers to inject malicious scripts into webpages viewed by users, potentially leading to data theft, session hijacking, or unauthorized actions on behalf of the user. It is crucial for users and administrators to implement mitigations promptly to secure their systems against such threats.

References

https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-8

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-63447 : XSS Vulnerability in Water Management System by Vendor