← Database

CVE-2026-24348

MEDIUM CVSS: 6.1 Published: 2026-01-27 Modified: 2026-06-17

Description

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

Affected Platforms

Nimbletech Ezcast Pro Dongle Ii FirmwareNimbletech Ezcast Pro Dongle Ii

Weakness Type

CWE-20, CWE-79

References