medium5.7
CVE-2023-41781
There is a Cross-site scripting (XSS) vulnerability in ZTE MF258.
Impact
There is a Cross-site scripting (XSS) vulnerability in ZTE MF258. Due to insufficient input validation of SMS interface parameter, an XSS attack will be triggered.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Mf258 Firmware | Versions zte_std_v1.0.0b08, zte_std_v1.0.0b10 |