CVE-2018-13308

Cross-site scripting in noticegen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases button" field...

CVE-2018-13308

CVE-2018-13308 affects the TOTOLINK A3002RU router (firmware 1.0.8). The issue is a cross-site scripting vulnerability in the notice_gen.htm page, exploitable by modifying the "User phrases button" field to execute arbitrary JavaScript. The CVE descriptions in multiple sources confirm the vulnera...