CVE-2025-5742: Schneider Electric Evlink Wallbox

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user modifies configuration parameters on the web server

Affected products

Published 2025-06-10. Last modified 2026-06-17.