Medium severity4.8NVD Advisory· Published Jan 8, 2025· Updated Jun 17, 2026
CVE-2025-21603
CVE-2025-21603
Description
Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and earlier. If an attacker logs in to the affected product and manipulates the device settings, an arbitrary script may be executed on the logged-in user's web browser when accessing a crafted URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.05
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.