GO-2022-0894 vulnerabilities

Vulnerabilities for packages: k3d...

CVE-2022-40846

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, a Stored Cross Site Scripting XSS vulnerability exists allowing an attacker to execute JavaScript code via the applications stored hostname...

CVE-2022-40846

Summary of CVE-2022-40846 (Tenda AC1200 Router W15Ev2): A stored XSS vulnerability exists in the hostname field of the router’s web interface (firmware version 15.11.0.10(1576)). An attacker can inject JavaScript that is stored and later rendered by the application, enabling arbitrary script exec...