Vulnerability Details CVE-2025-63229
The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting (XSS) vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's browser, potentially stealing sensitive information, hijacking sessions, or performing unauthorized actions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.4%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2025-63229
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_1000:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_100:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_2000:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_3000:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_300:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_30:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_3500:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_500:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_50:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_6000:-
-
cpe:2.3:h:dbbroadcast:mozart_dds_next_7000:-
-
cpe:2.3:h:dbbroadcast:mozart_next_1000:-
-
cpe:2.3:h:dbbroadcast:mozart_next_100:-
-
cpe:2.3:h:dbbroadcast:mozart_next_2000:-
-
cpe:2.3:h:dbbroadcast:mozart_next_3000:-
-
cpe:2.3:h:dbbroadcast:mozart_next_300:-
-
cpe:2.3:h:dbbroadcast:mozart_next_30:-
-
cpe:2.3:h:dbbroadcast:mozart_next_3500:-
-
cpe:2.3:h:dbbroadcast:mozart_next_500:-
-
cpe:2.3:h:dbbroadcast:mozart_next_50:-
-
cpe:2.3:h:dbbroadcast:mozart_next_6000:-
-
cpe:2.3:h:dbbroadcast:mozart_next_7000:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_1000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_100_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_2000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_3000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_300_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_30_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_3500_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_500_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_50_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_6000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_dds_next_7000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_1000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_100_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_2000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_3000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_300_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_30_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_3500_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_500_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_50_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_6000_firmware:-
-
cpe:2.3:o:dbbroadcast:mozart_next_7000_firmware:-