Lucene search
MitreCVELIST:CVE-2018-19922HistoryOct 03, 2022 - 4:21 p.m.
CVE-2018-19922
2022-10-0316:21:56
mitre
www.cve.org
cve-2018-19922
xss
website blocking
actiontec c1000a
firmware
remote attacker
html injection
url parameter
post request
0.001 Low
EPSS
Percentile
45.4%
Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the ‘TodUrlAdd’ URL parameter in a /urlfilter.cmd POST request.
Related
cve
cve
CVE-2018-19922
2022-10-03 16:21:56
prion
prion
Cross site scripting
2018-12-06 22:29:00
nvd
nvd
CVE-2018-19922
2018-12-06 22:29:04