medium4.8
CVE-2016-7810
Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver.
Impact
Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Corega | Cg-Wlr300nx Firmware | through 1.20 |