Описание
A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Parent Controls Page. The manipulation of the argument Device Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- Exploit
- Permissions RequiredVendor Advisory
- Third Party AdvisoryVendor Advisory
- Third Party AdvisoryVendor Advisory
- Product
- Exploit
Уязвимые конфигурации
Одновременно
EPSS
2.4 Low
CVSS3
4.8 Medium
CVSS3
3.3 Low
CVSS2
Дефекты
Связанные уязвимости
A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Parent Controls Page. The manipulation of the argument Device Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Уязвимость компонента Parent Controls микропрограммного обеспечения маршрутизаторов Totolink X2000R, позволяющая нарушителю проводить межсайтовые сценарные атаки
EPSS
2.4 Low
CVSS3
4.8 Medium
CVSS3
3.3 Low
CVSS2