CVE-2025-41747

CVE-2025-41747 describes an unauthenticated XSS vulnerability in the web interface component pxc_vlanIntfCfg.php that can fool an authenticated user into sending a manipulated POST request to modify device configuration parameters available through the web-based management interface (WBM). The is...