Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.
References
Configurations
No configuration.
History
21 Nov 2024, 09:16
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_2_Guest_Access_Control/README.md - |
01 Aug 2024, 13:51
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-233 | |
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
14 May 2024, 15:37
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-14 15:37
Updated : 2024-11-21 09:16
NVD link : CVE-2024-33433
Mitre link : CVE-2024-33433
CVE.ORG link : CVE-2024-33433
JSON object : View
Products Affected
No product.
CWE
CWE-233
Improper Handling of Parameters