CVE-2018-13312

published 2018-11-26

CVE-2018-13312: Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice URL" field.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3002ru_firmware	—	—

CWE-79