| Titolo | Beetel Router Beetel 450TC3 V01.00.00_01 Cross Site Scripting |
|---|
| Descrizione | A stored cross-site scripting (XSS) vulnerability exists in Beetel 450TC3 Router firmware V01.00.00_01. The issue is caused by improper sanitization and output encoding of user-supplied input in the username field of the user management component. An authenticated low-privileged user can create or modify a user account containing malicious JavaScript code in the username field, which is subsequently stored by the application. When an administrator later accesses the user management page to view the list of users, the injected script is executed in the administrator's browser context.
Successful exploitation may allow execution of arbitrary JavaScript with the administrator's session privileges, potentially leading to session hijacking, unauthorized administrative actions, modification of router configuration, user management operations, and other actions performed on behalf of the administrator. |
|---|
| Fonte | ⚠️ https://github.com/Greejith-k/Stored-Cross-Site-Scripting-Stored-XSS-Vulnerability-in-Beetel-450TC3-Router |
|---|
| Utente | Greejith (UID 99578) |
|---|
| Sottomissione | 14/07/2026 08:47 (2 mesi fa) |
|---|
| Moderazione | 29/08/2026 18:29 (2 months later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 397038 [Beetel 450TC3 01.00.00_01 User Management Nome utente cross site scripting] |
|---|
| Punti | 20 |
|---|