html5_snmp Persistent Cross-Site Scripting Vulnerability in the Remark Parameter

A persistent cross-site scripting vulnerability has been identified in html5_snmp version 1.11. This vulnerability allows attackers to inject malicious scripts through the 'Remark' parameter in the 'add_router_operation.php' file. By crafting a POST request with a script payload in the Remark field, attackers can execute arbitrary JavaScript in the browsers of victims when the page is loaded.

Impact

Exploitation of this vulnerability allows for persistent cross-site scripting, where injected scripts are executed in the context of the user viewing the page.

Reproduction

To reproduce this vulnerability, send a POST request to 'add_router_operation.php' with a script payload in the 'Remark' parameter. The injected script will be executed when the page is loaded.