5 matches found
CVE-2025-25431
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
CVE-2025-25431
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
CVE-2025-25431
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
CVE-2025-25431
The CVE-2025-25431 entry concerns TRENDnet TEW-929DRU (firmware 1.0.0.10). A Stored Cross-Site Scripting (XSS) flaw exists in the /captive_portal.htm page, exploitable via the wifi_data/ssid field in the request (likely via wifi_data[ssid]). Multiple sources corroborate the issue and describe it ...
