CVE-2023-2386 Netgear SRX5308 Web Management Interface cross site scripting

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function of the file scgi-bin/platform.cgi?page=firewalllogsemail.htm of the component Web Management Interface. The manipulation of the argument smtpServer.toAddr leads to cross site...

CVE-2023-2386

Netgear SRX5308 Web Management Interface contains a cross-site scripting (XSS) vulnerability in the scgi-bin/platform.cgi?page=firewall_logs_email.htm endpoint. The issue stems from insufficient input validation of the smtpServer.toAddr parameter, allowing remote attacker-controlled script execut...