Cross site scripting

2020-08-0722:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.

CPENameOperatorVersion
tl-ps310u_firmwareeq< 2.79.0.t210

CPE	Name	Operator	Version
	tl-ps310u_firmware	eq	< 2.79.0.t210

References

research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/