Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Location Aware Sensor System by Linkit ONE, up to commit f06bd20 (2023-04-26), contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attackers to execute arbitrary JavaScript by injecting malicious code into GET parameters. Attackers can craft a malicious URL containing unencoded payloads in the site, city, district, channel, or apikey parameters to execute scripts in victims' browsers when they visit the page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-19 | 1 | General1 |
| 2026-03-23 | 1 | Disclosure1 |
CVE-2026-32843 Location Aware Sensor System by Linkit ONE, up to commit f06bd20 (2023-04-26), contains a reflected cross-site scripting vulnerability in the PM25.php file that allow… https://www.cve.org/CVERecord?id=CVE-2026-32843
Post summary
CVE-2026-32843 is a reflected XSS flaw found in the PM25.php file of the Linkit ONE Location Aware Sensor System; no PoC, exploit code, or patch information is included.
CVE-2026-32843 Reflected Cross-Site Scripting Vulnerability in Linkit ONE Location Sensor System https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32843
Post summary
A brief CVE description labeling CVE-2026-32843 as a reflected XSS issue in the Linkit ONE Location Sensor System, with no indication of exploitation, patches, or PoC code.