CVE-2019-25015: Openwrt

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID.

Affected products

• Openwrt Openwrt: from 18.06.0, up to and including 18.06.4

Published 2021-01-26. Last modified 2026-06-17.