Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2025-52358

A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and below. This issue allows attackers to inject JavaScript payloads within the error or edit-menu-item parameters which are then executed in the victim's browser session.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Vivaldi Vivaldigroup
Products
Icontrol+ Server Icontrol\+ Server Vivaldi Domotica Icontrol and 1 more