CVE-2021-34207

published 2021-08-20

CVE-2021-34207: Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrary JavaScript by modifying the "Domain Name" field, "Server Address" field, "User Name/Email", or "Password/Key" field.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3002r_firmware	—	—

CWE-79