CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) in its web interface (specifically version 1.0.6 Build 20231011 rel.85717(5553) ) due to improper handling of directory listing paths. An attacker can provide a specially crafted URL that causes the router's web page to ...

CVE-2024-57514: Improper Neutralization of Input During Web Page Generation

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...