TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page.
No PoCs from references.
- https://github.com/4hsien/CVE-vulns
- https://github.com/4hsienyang/CVE-vulns
- https://github.com/NaInSec/CVE-LIST
- https://github.com/fkie-cad/nvd-json-data-feeds