| 제목 | Edimax BR6288ACL v1.12 Cross Site Scripting |
|---|
| 설명 | The vulnerability exists in the wiz_WISP24gmanual.asp page, where user input from the manualssid field is directly passed to the configuration without proper sanitization. This allows an attacker to inject malicious JavaScript, which is stored in the router’s configuration. When the configuration is accessed again, the injected payload executes, leading to Stored Cross-Site Scripting (XSS). |
|---|
| 원천 | ⚠️ https://tzh00203.notion.site/EDIMAX-BR6288ACL-v1-12-XSS-via-wiz_WISP24gmanual-asp-Configuration-2eeb5c52018a802e8ed9f6d000f7a6aa?source=copy_link |
|---|
| 사용자 | tian (UID 93438) |
|---|
| 제출 | 2026. 01. 21. AM 05:29 (9 개월 ago) |
|---|
| 모더레이션 | 2026. 02. 05. PM 02:20 (15 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 344493 [Edimax BR-6288ACL 까지 1.12 wiz_WISP24gmanual.asp wiz_WISP24gmanual manualssid 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|