CVE-2025-58836: Franz Wieser Fw Anker

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Franz Wieser FW Anker fw-anker allows Stored XSS.This issue affects FW Anker: from n/a through <= 1.2.6.

Affected products

• Franz Wieser Fw Anker: up to and including 1.2.6

Published 2025-09-05. Last modified 2026-10-05.