Xiaomi Mi Router 3 Cross-Site Scripting Vulnerability

Xiaomi Mi Router 3 is a wireless router product from Chinese company Xiaomi. A cross-site scripting vulnerability exists in the API 404 page in Xiaomi Mi Router 3 version 2.22.15. A remote attacker can exploit this vulnerability to execute arbitrary JavaScript code via a modified URL path...

CVE-2018-13022

The Xiaomi Mi Router 3 (firmware version 2.22.15) is affected by a cross-site scripting (XSS) vulnerability in the API 404 page. The issue enables an attacker to inject and execute arbitrary JavaScript by supplying a crafted URL path. Public references across CNVD/CVE records confirm the same des...

PT-2018-11542

Name of the Vulnerable Software and Affected Versions Xiaomi Mi Router 3 version 2.22.15 Description A cross-site scripting issue exists in the API 404 page, allowing attackers to execute arbitrary JavaScript code via a modified URL path. Recommendations For Xiaomi Mi Router 3 version 2.22.15,...

CVE-2018-13022: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScript via a modified URL path...