medium6.1
CVE-2021-44148
GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS pay…
Impact
GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gl-Inet | Gl-Ar150 Firmware | from 2.0 before 3.0 |