Description
Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802 devices allows remote authenticated users to inject arbitrary web script or HTML via the DHCP vendor class ID field (P148).
Unscored
CVE-2017-16564
EUVD-2017-7756GHSA-mc72-cfpm-m746
Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802 devices allows remote authenticated users…
Published Nov 6, 2017 · Updated Aug 5, 2024 · Assigned by mitre