CVE-2018-6193

Routers2 2.24 is vulnerable to a Reflected Cross-Site Scripting (XSS) in the rtr parameter of the page=graph action targeting cgi-bin/routers2.pl. PoCs show injecting scripts via rtr, enabling client-side script execution when a victim loads the URL. Exploit references exist (Exploit-DB, 0day.tod...