CVE-2021-44148

creationtimestamp| type| source ---|---|--- 2021-12-08 00:22:56+00:00| seen| https://t.me/cibsecurity/33522...

CVE-2021-44148

GL.iNet GL-AR150 2.x before 3.x devices configured as repeaters are affected by a cross‑site scripting (XSS) vulnerability in cgi-bin/router_cgi?action=scanwifi. An attacker can embed an XSS payload in the SSID name, triggering XSS. This is documented in CVE-2021-44148 (NVD/NVD-derived descriptio...