TVN ID	TVN-202502003
CVE ID	CVE-2025-1145
CVSS	6.1 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products	ISOinsight v2.9.0.x, v3.0.0.x
Description	NetVision Information ISOinsight has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code in the user's browser through phishing techniques.
Solution	For v2.9.0.x, please update to version 2.9.0.241231 or later. For v3.0.0.x, please update to version 3.0.0.241231 or later.
Credit	Security member
Public Date	2025-02-10