XSS in Otsuka Information Technology Fms
CVE-2025-13589
FMS developed by Otsuka Information Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (36.0th percentile) — read the EPSS interpretation.
Affected products
- Otsuka Information Technology Fms — versions 0