CVE-2018-13312

Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice URL" field.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-11-26

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• A3002ru Firmware (Totolink)

References

• https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154