Cross-site scripting (XSS) vulnerability on TP-Link WR841N
A stored cross-site scripting (XSS) vulnerability (CVE-2025-25427) has been identified in the “upnp.htm” page of TP-Link WR841N routers' web interface. This flaw allows remote attackers to inject JavaScript via the port mapping description.