CVE-2025-36750

Publication date

2025-12-13 08:16:22

Family

DIVD

State

PUBLISHED

Description

ShineLan-X contains a stored cross site scripting (XSS) vulnerability in the Plant Name field. A HTML payload will be displayed on the plant management page via a direct post. This may allow attackers to force a legitimate user’s browser’s JavaScript engine to run malicious code.