CVE-2019-20675

NETGEAR RBR50, RBS50, and RBK50 are affected by a stored cross-site scripting (XSS) vulnerability in the web application prior to firmware version 2.3.5.30. The root cause is insufficient validation of client-side data in the WEB interface, enabling an attacker to execute client-side code. Impact...