CVE-2021-20645

CVE-2021-20645 refers to a stored cross-site scripting vulnerability in ELECOM WRC-300FEBK-A. Public sources describe that an arbitrary script could be executed in the browser of a logged-in user due to a vulnerability in the web setup page, with impact listed as execution of scripts on the user’...

JVN#47580234: Multiple vulnerabilities in multiple ELECOM products

Multiple products provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Improper Access Control CWE-284 - CVE-2021-20643 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N| Base Score: 5.3 CVSS v2| AV:N/AC:L/Au:N/C:N/I:P/A:N| Base Score:...

CVE-2019-20645

NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS...

CVE-2019-20645

NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS...

CVE-2019-20645

CVE-2019-20645 affects NETGEAR RAX40 devices prior to version 1.0.3.62, with a stored XSS vulnerability in the device’s web application. The issue is caused by unvalidated input leading to client-side script execution, enabling an attacker to potentially perform actions or access data in the vict...

CVE-2018-20645

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

CVE-2018-20645

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

CVE-2018-20645

Summary of CVE-2018-20645 : The vulnerability affects PHP Scripts Mall Basic B2B Script 2.0.9, with HTML injection possible through the First Name or Last Name fields. The initial disclosure lists a CVSS base score of 5.4 (Medium) on CVSS 3.0 and 3.5 (Low) on CVSS 2.0, indicating a moderate impac...