CVE-2025-41681 — Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input

CVE-2025-41681

Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input PUBLISHED

Description (CNA)

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.

Affected (CNA)

Vendor / product	Versions
MB connect line / mbNET.mini	affected 0.0.0 before 2.3.3
Helmholz / REX 100	affected 0.0.0 before 2.3.3

CWE

CWE-79

References

https://certvde.com/de/advisories/VDE-2025-058

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2025/Jul/38