NetSight
medium6.1

CVE-2021-36603

Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".

Impact

Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".

Affected products

VendorProductAffected versions
Tasmota ProjectTasmota
Version 6.5.0

Weakness classification

References