CVE-2021-44148: Improper Neutralization of Input During Web Page Generation

GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/routercgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name...

PT-2021-24045

Name of the Vulnerable Software and Affected Versions: GL.iNet GL-AR150 versions 2.x through 2.x Description: The issue allows for XSS when an attacker creates an SSID with an XSS payload as the name, affecting devices configured as repeaters. This occurs through the cgi-bin/router...