praksokchea/CVE-2025-6563

PoC

Reflected XSS vulnerability in MikroTik Hotspot login page

view exploit source poc_in_githubauthor praksokcheapublished 2025-06-02catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-6563US	—	0.72% (54th)	Exploit	2025-07-03
A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on versions below 7.19.2. An attacker can inject the `javascript` protocol in the `dst` parame…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.