The vulnerability of the set_lang_CountryCode() function in the login.cgi script of the Wavlink AC3000 (WL-WN533A8) router microprogramming system allows a hacker to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the setlangCountryCode function in the login.cgi script of the Wavlink AC3000 WL-WN533A8 router microprogramming system is related to the failure to remove scipt-related HTML tags from web pages when processing the langue parameter. Exploiting this vulnerability can allow an...

CVE-2024-39363: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A cross-site scripting xss vulnerability exists in the login.cgi setlangCountryCode functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this...