CVE-2021-34207

Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Domain Name" field, "Server Address" field, "User Name/Email", or "Password/Key" field...

CVE-2021-34207

CVE-2021-34207 describes a cross-site scripting vulnerability in TOTOLINK A3002R’s ddns.htm (firmware version V1.1.1-B20200824, new UI). The flaw allows an attacker to inject arbitrary JavaScript by supplying crafted input in the Domain Name, Server Address, User Name/Email, or Password/Key field...