5.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.9%
OpenWrt 18.06.4 allows XSS via the βNew port forwardβ Name field to the cgi-bin/luci/admin/network/firewall/forwards URI (this can occur, for example, on a TP-Link Archer C7 device).
github.com/openwrt/luci/commit/c048f23bad54b0a79449652380b317819e0ea978