CVE-2020-6872

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects...

CVE-2020-6872

The CVE-2020-6872 issue affects ZTE server-management software and is a storage XSS vulnerability. The attack path involves injecting malicious scripts via the foreground login page, causing the user’s browser to execute the payload. Affected firmware/models include multiple R5300G4V0x, R8500G4V0...