medium6.1
CVE-2018-14710
Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.
Impact
Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Rt-Ac3200 Firmware | Version 3.0.0.4.382.50010 |