crafty_controller vulnerabilities

CVEs whose affected-version data names the crafty_controller package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-14701High· 7.1

An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modification.

An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modification.

▾ Twilightcraftycontrol · crafty_controllerEPSS 0.29%via NVD

crafty_controller vulnerabilities (CVEs) · VulnSea