medium6.1
CVE-2025-50740
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability.
Impact
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability. The AutoConnect web interface /_ac/config allows HTML/JS code to be executed via a crafted network SSID.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.