CVE-2018-6355: Improper Neutralization of Input During Web Page Generation

/goform/setLang on iBall 300M devices with "iB-WRB302N1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter...

PT-2018-17498

Name of the Vulnerable Software and Affected Versions iBall 300M version iB-WRB302N 1.0.1-Sep 8 2017 Description The issue concerns an Unauthenticated Stored Cross Site Scripting vulnerability. It is exploited via the lang parameter in the "/goform/setLang" API endpoint. Recommendations For versi...