CVE-2025-65228

Low · 3.5

CVSS

3.5

EPSS

0.2%

Published

Dec 8, 2025

CISA due date

—

The record

A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T telemetry controller (firmware 1.5.1799).

Affected packages

Ecosystem	Package	Introduced	Fixed