Cross site scripting

2018-12-0622:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

45.4%

JSON

Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the ‘TodUrlAdd’ URL parameter in a /urlfilter.cmd POST request.

CPENameOperatorVersion
c1000a_firmwareeq<= cac4-31.30l.95

CPE	Name	Operator	Version
	c1000a_firmware	eq	<= cac4-31.30l.95

References

github.com/logern5/c1000a_xss/blob/master/README.md

0.001 Low

EPSS

Percentile

45.4%

JSON

Related for PRION:CVE-2018-19922