Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-57543 Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI … https://www.cve.org/CVERecord?id=CVE-2025-57543
Post summary
The text announces an XSS vulnerability in NetBox 4.3.5’s comment field, allowing arbitrary HTML injection, without mentioning patches or exploitation status.
CVE-2025-57543 Cross-Site Scripting in NetBox 4.3.5 via Object Form Comment Field https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-57543
Post summary
The text announces CVE-2025-57543, a cross‑site scripting vulnerability in NetBox 4.3.5’s object form comment field, detailing the technical flaw but lacking exploit or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | netbox | netbox | 4.3.5 | - | - |