VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 21, 2025· Updated Nov 3, 2025

Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input

CVE-2025-41681

Description

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.

Affected products

2
  • Helmholz/REX 100v5
    Range: 0.0.0
  • MB connect line/mbNET.miniv5
    Range: 0.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.