PT-2022-11898
CVE-2021-43729
·
Published
2022-05-20
·
Updated
2022-05-31
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Pix-Link MiNi Router version 28K.MiniRouter.20190211
Description
The issue is related to a stored cross-site scripting (XSS) vulnerability. This vulnerability is caused by an unsanitized
Security Key parameter, which allows for malicious script execution.Recommendations
For Pix-Link MiNi Router version 28K.MiniRouter.20190211, consider restricting access to the
Security Key parameter to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾