CVE-2017-8839

CVE-2017-8839 is an XSS vulnerability in Peplink Balance devices (models 305, 380, 580, 710, 1350, 2500) due to injection through the orig_url parameter in guest/preview.cgi. Affected firmware is fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093 (pre-patch); vulnerable firmware include...