CVE-2025-41406 Information

Description

Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited when a user connects to the affected device with a specific operation an arbitrary script may be executed on the web browser of the moderator user.

Reference

https://jvn.jp/en/jp/JVN51394666/ https://www.uchida.co.jp/wivia/support02.html