Cross site scripting

2017-06-0916:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

JSON

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
cg-wlr300nx_firmwarele1.20

CPE	Name	Operator	Version
	cg-wlr300nx_firmware	le	1.20

References

corega.jp/support/security/20161111_wlr300nx.htm

www.securityfocus.com/bid/94248

jvn.jp/en/jp/JVN92237169/index.html