CVE-2018-13134

CVE-2018-13134 affects TP-Link Archer C1200 firmware, specifically EU version 1.13 Build 2018/01/24 rel.52299. The issue is a Cross‑Site Scripting (XSS) vulnerability via PATH_INFO to the /webpages/data URI in the router’s web UI. The root cause is failure to filter special characters/inputs, ena...