CVE-2025-7920 Information

Description

WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user’s browser through phishing attacks.

Reference

https://www.twcert.org.tw/en/cp-139-10267-775be-2.html https://www.twcert.org.tw/tw/cp-132-10262-2fcb6-1.html

CNNVD-202507-2609 (Published: 2025-07-21)

Share on: