CVE-2025-15355 MEDIUM

CVE-2025-15355: NetVision Information｜ISOinsight - Reflected Cross-site Scripting

Vendor Netvision Information
Product ISOinsight
Weakness CWE-79 · XSS
Published December 30, 2025
Last update December 30, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

ISOinsight developed by NetVision Information has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

Key dates

02Disclosure timeline

December 30, 2025 CVE published
December 30, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-0483 Fanli2012 native-php-cms jump.php cross site scripting CVE-2025-23838 WordPress Bauernregeln Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-39521 WordPress Contact Form vCard Generator plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2022-3123 Cross-site Scripting (XSS) - Reflected in splitbrain/dokuwiki CVE-2025-24578 WordPress ElementInvader Addons for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability