CVE-2025-1175: Kelio Visio 1

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Reflected Cross-Site Scripting (XSS) vulnerability in Kelio Visio 1, Kelio Visio X7 and Kelio Visio X4, in versions between 3.2C and 5.1K. This vulnerability could allow an attacker to execute a JavaScript payload by making a POST request and injecting malicious code into the editable ‘username’ parameter of the ‘/PageLoginVisio.do’ endpoint.

Affected products

• Kelio Kelio Visio 1: from 3.2C, up to and including 5.1K
• Kelio Kelio Visio x4: from 3.2C, up to and including 5.1K
• Kelio Kelio Visio x7: from 3.2C, up to and including 5.1K

Published 2025-02-10. Last modified 2026-06-17.