← Database

CVE-2025-14701

HIGH CVSS: 7.1 Published: 2025-12-17 Modified: 2026-06-17

Description

An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modification.

Affected Platforms

Craftycontrol Crafty Controller

Weakness Type

CWE-79

References