CVE-2025-25427 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/v14.8
High CVSS: 8.6

CVE-2025-25427

A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/v14.8 <= Build 241230 Rel. 50788n allows remote attackers to inject arbitrary JavaScript code via the port mapping description. This leads to an execution of the JavaScript payload when the upnp page is loaded.
Vendor
Tp-link
Product
Wr841n Firmware
CWE
CWE-79
Yayın Tarihi
2025-04-18 01:15:32
Güncelleme
2025-07-09 17:35:24
Source Identifier
f23511db-6c3e-4e32-a477-6aa17d310630
KEV Date Added
-

Kategoriler

CWE-79 Wr841n Firmware HIGH Tp-link 2025

Referanslar

https://github.com/slin99/2025-25427 https://www.tp-link.com/us/support/download/tl-wr841n/#Firmware https://www.tp-link.com/us/support/faq/4415/ https://github.com/slin99/2025-25427/blob/master/readme.md