CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-01-25

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Wf2419 Firmware (Netis-systems)

References

• https://packetstormsecurity.com/files/145513/Netis-WF2419-HTML-Injection.html