CVE-2025-5990
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
Original description
The description as published by the source.
An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input.
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com