CVE-2025-14701

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller PUBLISHED

Description (CNA)

An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modification.

Affected (CNA)

Vendor / product	Versions
Arcadia Technology, LLC / Crafty Controller	affected 0 before 4.6.2

CWE

CWE-79

References

https://gitlab.com/crafty-controller/crafty-4/-/issues/647

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.