| शीर्षक | Edimax BR6288ACL v1.12 Cross Site Scripting |
|---|
| विवरण | The vulnerability exists in the wiz_WISP24gmanual.asp page, where user input from the manualssid field is directly passed to the configuration without proper sanitization. This allows an attacker to inject malicious JavaScript, which is stored in the router’s configuration. When the configuration is accessed again, the injected payload executes, leading to Stored Cross-Site Scripting (XSS). |
|---|
| स्रोत | ⚠️ https://tzh00203.notion.site/EDIMAX-BR6288ACL-v1-12-XSS-via-wiz_WISP24gmanual-asp-Configuration-2eeb5c52018a802e8ed9f6d000f7a6aa?source=copy_link |
|---|
| उपयोगकर्ता | tian (UID 93438) |
|---|
| सबमिशन | 21/01/2026 05:29 AM (9 महीनों पहले) |
|---|
| संयम | 05/02/2026 02:20 PM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 344493 [Edimax BR-6288ACL तक 1.12 wiz_WISP24gmanual.asp wiz_WISP24gmanual manualssid क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|