CVE-2025-1617

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-79CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Feb 24, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-16186.1A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unknown code of the file CVE-2025-16194.8The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privileCVE-2025-16204.8The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privileCVE-2025-16214.8The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privileCVE-2025-16223.5The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privileCVE-2025-16233.5The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privileCVE-2025-16243.5The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privileCVE-2025-16255.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a paCVE-2025-16265.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a CVE-2025-16275.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post CVE-2025-16293.5A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as problematic. Affected is CVE-2025-16325.5A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdun
CVE-2025-1617: Low severity, CVSS 2.4 | Vulnix