CVE-2025-5990 Information

Jun 16, 2025 cve

Description

An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote authenticated attacker to perform stored XSS via malicious form input.

Reference

https://gitlab.com/crafty-controller/crafty-4/-/issues/567

CNNVD-202506-1841 (Published: 2025-06-15)

Share on: