CVE-2025-43924 | Unicom Focal Point 7.6.1 loginpage SettingController val cross site scripting

A vulnerability classified as problematic has been found in Unicom Focal Point 7.6.1. This affects the function SettingController of the file /fp/admin/settings/loginpage. The manipulation of the argument val leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-43924. It is possible to initiate the attack remotely. There is no exploit available.