A vulnerability has been found in TP-Link Omada Software Controller, Omada OC200, OC220, OC300, OC400 and Omada cloud controller and classified as problematic. This impacts an unknown function. The manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-9289. The attack is possible to be carried out remotely. No exploit exists.
The affected component should be upgraded.
