Cross site scripting

2018-01-3017:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

JSON

/goform/setLang on iBall 300M devices with “iB-WRB302N_1.0.1-Sep 8 2017” firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter.

CPENameOperatorVersion
ib-wrb302n_firmwareeq1.0.1-sep-8-2017

CPE	Name	Operator	Version
	ib-wrb302n_firmware	eq	1.0.1-sep-8-2017

References

gist.github.com/MayurUdiniya/597169f582e506b610beb4e84fd8c8fc