Description
There is a Cross-site scripting (XSS) vulnerability in ZTE MF258. Due to insufficient input validation of SMS interface parameter, an XSS attack will be triggered.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ZTE | MF258 | ZTE_STD_V1.0.0B08 – ≤ ZTE_STD_V1.0.0B10 | — |