Description
GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name.
Unscored
CVE-2021-44148
EUVD-2021-30999GHSA-4rv3-gffj-q2p5
GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an …
Published Dec 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre