medium4.8
CVE-2020-35228
A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arb…
Impact
A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or HTML via the language parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Gs116e Firmware | Version 2.6.0.43 |
| Netgear | Jgs516pe Firmware | Version 2.6.0.43 |