Cross Site Scripting Vulnerability in Water Management System by Sanin
CVE-2025-63449

5.4MEDIUM

Key Information:

Vendor

Sanin

Status
Water Management System
Vendor
CVE Published:
3 November 2025

What is CVE-2025-63449?

The Water Management System v1.0 is susceptible to a Cross Site Scripting (XSS) vulnerability found in the /orders.php file. This flaw allows an attacker to inject malicious scripts into web pages viewed by other users, potentially compromising user data and session information. It is crucial for users and administrators of the affected software to apply necessary security updates and mitigate risks associated with this vulnerability.

References

https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-9

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-63449 : Cross Site Scripting Vulnerability in Water Management System by Sanin