CVE-2021-43661

CVE-2021-43661 affects TotoLink EX300_v2 firmware 4.0.3c.140_B20210429; the vulnerability is a reflected XSS in the /home.asp component. The impact is client-side JS execution as described; no exploitation details or patch/remediation information are provided in the supplied documents.