| शीर्षक | Luxul XWR-600 Router Firmware Ver: 4.0.1 Cross Site Scripting |
|---|
| विवरण | Product: Luxul Xen XWR-600
Firmware Version: 4.0.1
Vulnerability Type: Stored Cross-Site Scripting (XSS)
Description:
The Luxul XWR-600 web administration interface fails to sanitize user-supplied input in SSID name fields. A malicious SSID value containing JavaScript is stored and later rendered without output encoding, causing script execution in the administrator’s browser when the page is viewed. This results in a stored XSS condition.
Affected Components:
Guest Network SSID configuration
Wireless Profiles (2.4 GHz / 5 GHz and 5 GHz)
Impact:
An authenticated attacker could:
• Execute arbitrary JavaScript in the admin browser
• Perform unauthorized configuration actions
• Inject persistent malicious content
|
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1S2f5lT0b-KE9m6xq8BY6eSixv6SgsGL1e8QQzeOkq5c/ |
|---|
| उपयोगकर्ता | AppSecHuntr (UID 93981) |
|---|
| सबमिशन | 31/12/2025 05:25 AM (9 महीनों पहले) |
|---|
| संयम | 10/01/2026 10:44 AM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 340435 [Luxul XWR-600 तक 4.0.1 Web Administration Interface Guest Network/Wireless Profile SSID क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|