medium4.8
CVE-2025-41681
A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.
Impact
A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbnet.Mini Firmware | before 2.3.3 |