Medium severity4.8NVD Advisory· Published Jul 21, 2025· Updated Jun 17, 2026
CVE-2025-41681
CVE-2025-41681
Description
A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*Range: <2.3.3
- Helmholz/REX 100v5Range: 0.0.0
- MB connect line/mbNET.miniv5Range: 0.0.0
Patches
Vulnerability mechanics
References
2- certvde.com/de/advisories/VDE-2025-058nvdVendor Advisory
- seclists.org/fulldisclosure/2025/Jul/38nvdMailing List
News mentions
0No linked articles in our index yet.