CVE-2025-52378 | Nexxt NCM-X1800 up to 1.2.7 Device Management Page um_device_set_aliasname DEVICE_ALIAS cross site scripting (EUVD-2025-21440)

A vulnerability, which was classified as problematic, was found in Nexxt NCM-X1800 up to 1.2.7. Affected is an unknown function of the file /web/um_device_set_aliasname of the component Device Management Page. The manipulation of the argument DEVICE_ALIAS leads to cross site scripting.

This vulnerability is traded as CVE-2025-52378. It is possible to launch the attack remotely. Furthermore, there is an exploit available.