CVE-2021-34223

Cross-site scripting in urlfilter.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "URL Address" field...

CVE-2021-34223

creationtimestamp| type| source ---|---|--- 2021-08-20 20:19:21+00:00| seen| https://t.me/cibsecurity/27645...

CVE-2021-34223

CVE-2021-34223 describes a Cross-site scripting (XSS) vulnerability in TOTOLINK A3002R (version V1.1.1-B20200824, noted as an Important Update with new UI). The issue resides in urlfilter.htm where an attacker can modify the URL Address field to execute arbitrary JavaScript. According to the prov...