XSS in Tp-Link Tl-Wr841n
CVE-2012-6316
Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script or HTML via the (1) username or (2) pwd parameter to userRpm/NoipDdnsRpm.htm.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.008 (52.2th percentile) — read the EPSS interpretation.
Affected products
- Tp-link Tl-wr841n
- Tp-link Tl-wr841n_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)