Cross-Site Scripting Vulnerability in Multiple Cambium Networks Products

The Cambium Networks Xirrus XR520, among others, is a wireless access point device from Cambium Networks, USA. A cross-site scripting vulnerability exists in the 'user' parameter of the cgi-bin/ViewPage.cgi file in multiple Cambium Networks products. The vulnerability stems from a lack of proper...

Cross site scripting

An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows XSS...