CVE-2014-4871

The CVE-2014-4871 vulnerability affects NetCommWireless NB604N routers (firmware prior to GAN5.CZ56T-B-NC.AU-R4B030.EN). A stored XSS flaw exists in wlsecurity.html via the wlWpaPsk parameter, allowing an attacker to inject scripts that run in an authenticated user’s context. Reported base CVSS ~...