CVE-2021-34223

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version V1.1.1-B20200824

Description: Cross-site scripting in urlfilter.htm allows attackers to execute arbitrary JavaScript by modifying the URL Address field. This issue enables attackers to execute arbitrary JavaScript code, potentially leading to unauthorized actions on the affected system.

Recommendations: For TOTOLINK A3002R version V1.1.1-B20200824, as a temporary workaround, consider restricting access to the urlfilter.htm page until a patch is available. Avoid using the URL Address field in the affected page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.