Stored Cross-Site Scripting Vulnerability in Rockwell Automation Products

CVE-2025-7329

What is CVE-2025-7329?

A vulnerability exists within Rockwell Automation products that allows for stored cross-site scripting (XSS), potentially enabling an attacker to manipulate and expose sensitive user data. The issue arises from inadequate filtering and encoding of special characters, which can be exploited if an attacker has access to update the configuration fields behind an admin login. This flaw could lead to unauthorized access to sensitive information or the disruption of web page functionality, posing significant security risks to users and organizations relying on these products.

References