CVE-2025-41681 — Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input
A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.
Published: 2025-07-21 · CVSS: 4.8 · CVSS 3.1
A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7