CVE 4.8 MEDIUM

Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input_CVE-2025-41681

4.8 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.

Basic Information

ID CVE-2025-41681
Source CERTVDE
Published Jul 21, 2025 at 09:31
Modified Jul 21, 2025 at 12:30

Affected Product

Vendor MB connect line
Product mbNET.mini
Version 0.0.0
Affected Versions MB connect line mbNET.mini 0.0.0
Helmholz REX 100 0.0.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.