NuytsTech Security

CVE-2025-57389

by ·

A reflected cross-site scripted (XSS) vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user’s browser via a crafted payload.

More information : https://github.com/amalcew/CVE-2025-57389

Tags: