4 matches found
CVE-2024-31972
EnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that could lead to arbitrary JavaScript code execution under the context of the user's session via the Wi-Fi SSID input fields. Web scripts embedded into the vulnerable fields this way are executed immediate...
CVE-2024-31972
The EnGenius ESR580 A8J-EMR5000 wireless access points are vulnerable to a stored Cross-Site Scripting (XSS) flaw. A remote attacker can inject malicious web scripts into the Wi-Fi SSID input fields , which execute immediately when a user logs into the admin page. This vulnerability specifically ...
CVE-2024-31972: Improper Neutralization of Input During Web Page Generation
EnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that could lead to arbitrary JavaScript code execution under the context of the user's session via the Wi-Fi SSID input fields. Web scripts embedded into the vulnerable fields this way are executed immediate...
CVE-2024-31972
EnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that could lead to arbitrary JavaScript code execution under the context of the user's session via the Wi-Fi SSID input fields. Web scripts embedded into the vulnerable fields this way are executed immediate...