{"id":8502,"date":"2025-07-21T05:36:20","date_gmt":"2025-07-21T05:36:20","guid":{"rendered":"http:\/\/localhost\/?p=8502"},"modified":"2025-07-21T05:36:20","modified_gmt":"2025-07-21T05:36:20","slug":"persistent-cross-site-scripting-via-post-requests-due-to-improper-neutralization-of-input","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=8502","title":{"rendered":"Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nPersistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-21T09:31:25.796Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-21T09:31:25.796Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nMB connect line<\/td>\n<\/tr>\n
Product<\/th>\nmbNET.mini<\/td>\n<\/tr>\n
Version<\/th>\n0.0.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n4.8 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:H\/UI:R\/S:C\/C:L\/I:L\/A:N<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA high-privileged remote attacker can exploit this vulnerability to perform persistent cross-site scripting (XSS) attacks through improperly neutralized input in POST requests. This could allow attackers to inject malicious scripts into dynamic content, potentially affecting user sessions and data integrity. The vulnerability is considered medium severity due to its impact on user interaction and data integrity.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
AI Vendor<\/th>\nMB connect line<\/td>\n<\/tr>\n
AI Product<\/th>\nmbNET.mini<\/td>\n<\/tr>\n
AI Version<\/th>\n0.0.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n