CVE-2021-34215

Cross-site scripting in tcpipwan.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Service Name" field...

CVE-2021-34215

Cross-site scripting in tcpipwan.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Service Name" field...

CVE-2021-34215

CVE-2021-34215 affects TOTOLINK A3002R (firmware version V1.1.1-B20200824). The vulnerability is a stored XSS in tcpipwan.htm where an attacker can modify the “Service Name” field to cause arbitrary JavaScript execution. No exploitation details are provided beyond this description; affected compo...