EUVD-2018-11315

Malware in sbrugna...

CVE-2018-19630: Improper Neutralization of Input During Web Page Generation

cgihandlerequest in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?XSS URI...