What is CVE-2025-48470?

CVE-2025-48470 is a medium-severity vulnerability in Advantech Wireless Sensing And Equipment (Wise), classified under Cross-site Scripting. CVSS score: 4.1/10. Published 2025-06-24.

How severe is CVE-2025-48470?

Medium severity. CVSS v3 base score is 4.1 out of 10.

XSS in Advantech Wireless Sensing And Equipment (Wise)

CVE-2025-48470

Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’ browser, potentially leading to session hijacking, defacement, cre…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (6.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.1 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 (Third Party Advisory)

Frequently asked questions

What is CVE-2025-48470?: CVE-2025-48470 is a medium-severity vulnerability in Advantech Wireless Sensing And Equipment (Wise), classified under Cross-site Scripting. CVSS score: 4.1/10. Published 2025-06-24.
How severe is CVE-2025-48470?: Medium severity. CVSS v3 base score is 4.1 out of 10.