| 标题 | Beetel Router Beetel 450TC3 V01.00.00_01 Cross Site Scripting |
|---|
| 描述 | A stored cross-site scripting (XSS) vulnerability exists in Beetel 450TC3 Router firmware V01.00.00_01. The issue is caused by improper sanitization and output encoding of user-supplied input in the username field of the user management component. An authenticated low-privileged user can create or modify a user account containing malicious JavaScript code in the username field, which is subsequently stored by the application. When an administrator later accesses the user management page to view the list of users, the injected script is executed in the administrator's browser context.
Successful exploitation may allow execution of arbitrary JavaScript with the administrator's session privileges, potentially leading to session hijacking, unauthorized administrative actions, modification of router configuration, user management operations, and other actions performed on behalf of the administrator. |
|---|
| 来源 | ⚠️ https://github.com/Greejith-k/Stored-Cross-Site-Scripting-Stored-XSS-Vulnerability-in-Beetel-450TC3-Router |
|---|
| 用户 | Greejith (UID 99578) |
|---|
| 提交 | 2026-07-14 08時47分 (2 月前) |
|---|
| 管理 | 2026-08-29 18時29分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 397038 [Beetel 450TC3 01.00.00_01 User Management 用户名 跨网站脚本] |
|---|
| 积分 | 20 |
|---|