CVE-2017-2148

https://notcve.org/view.php?id=CVE-2017-2148

28 Apr 2017 — Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en firmware WN-AC1167GR version 1.0.4 y anteriores, que permitiría a un atacante remoto autenticado inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. • http://jvn.jp/en/jp/JVN01537659/index.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •