← Database

CVE-2021-44148

MEDIUM CVSS: 6.1 Published: 2021-12-07 Modified: 2026-06-17

Description

GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name.

Affected Platforms

Gl-Inet Gl-Ar150Gl-Inet Gl-Ar150 Firmware

Weakness Type

CWE-79

References