CVE-2022-40010 – Tenda AC6 AC1200 15.03.06.50_multi Cross Site Scripting

https://notcve.org/view.php?id=CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter in the Parental Control module. Tenda AC6 AC1200 version 15.03.06.50_multi suffers from a persistent cross site scripting vulnerability. • http://packetstormsecurity.com/files/173029/Tenda-AC6-AC1200-15.03.06.50_multi-Cross-Site-Scripting.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •