CVE-2025-14701

An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modification.

More information : https://gitlab.com/crafty-controller/crafty-4/-/issues/647