Medium severity5.4NVD Advisory· Published Jan 15, 2026· Updated Jun 17, 2026

CVE-2025-65349

Description

A Stored Cross-Site Scripting (XSS) vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at /index.htm.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Eachitaly/Wireless Mini Router Wireless N 300m Firmware
cpe:2.3:o:eachitaly:wireless_mini_router_wireless-n_300m_firmware:28k.minirouter.20190211:*:*:*:*:*:*:*
Each Italy/Wireless Mini Router WIRELESS-N 300Mcpe-rescue
Italy Wireless/Mini Router WIRELESS-N 300Mllm-fuzzy
Range: v28K.MiniRouter.20190211

Patches

Vulnerability mechanics

References

github.com/5ulfur/security-advisories/tree/main/CVE-2025-65349nvdExploitThird Party Advisory
imgur.com/a/X9DNOBjnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000