← Database

CVE-2026-25073

MEDIUM CVSS: 5.4 Published: 2026-03-07 Modified: 2026-06-17

Description

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary script content through the System Name field. Attackers can inject malicious scripts that execute in a victim's browser when the stored value is viewed due to improper output encoding.

Affected Platforms

Seekswan Zikestor Sks8310-8X FirmwareSeekswan Zikestor Sks8310-8X

Weakness Type

CWE-79

References