CVE-2024-32326

published 2024-04-18

CVE-2024-32326: TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.

medium 6.8 CVSS 3.1

AV N AC L PR L UI R S C C H I N A N

TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	ex200_firmware	—	—

CWE-79