CVE-2024-34582

Sunhillo SureLine (versions through 8.10.0 ) on RICI 5000 devices is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw within the Forgot Password feature. The vulnerability exists in the /cgi/usrPasswd.cgi endpoint because the userid_change parameter is copied directly into an HTML tag wi...