CVE-2023-0639

Summary: TRENDnet TEW-652BRP (version 3.04b01) exposes a Cross-Site Scripting issue in the Web Management Interface via the get_set.ccp endpoint, caused by improper handling of the nextPage parameter. This could allow remote attackers to inject scripts when data is viewed. Affected: TRENDnet TEW-...