CVE-2019-25284 MEDIUM

CVE-2019-25284: V-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Reflected Cross-Site Scripting Vulnerability

Vendor Guangzhou V
Product V-SOL GPON/EPON OLT Platform
Weakness CWE-79 · XSS
Published January 7, 2026
Last update May 24, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

V-SOL GPON/EPON OLT Platform v2.03 contains multiple reflected cross-site scripting vulnerabilities due to improper input sanitization in various script parameters. Attackers can exploit these vulnerabilities by injecting malicious HTML and script code to execute arbitrary scripts in a victim's browser session.

Key dates

02Disclosure timeline

January 7, 2026 CVE published
May 24, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-6757 Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode CVE-2026-27505 SVXportal <= 2.5 admin/user_action.php Stored XSS CVE-2024-49316 WordPress Akismet htaccess writer plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-25158 WordPress Uncomplicated SEO plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-43305 WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.11 - Cross Site Scripting (XSS) vulnerability