CVE-2019-18842

A cross-site scripting XSS vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by...

Cross site scripting

A cross-site scripting XSS vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by...

CVE-2019-18842

CVE-2019-18842 concerns the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module (web interface version 1.2.2). Multiple connected sources confirm a Cross‑Site Scripting (XSS) vulnerability in the configuration web interface caused by insufficient input validation, enabling an attacker to exf...