Edimax AC1200 Dual-Band Router BR-6476AC Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the Edimax AC1200 Wi-Fi 5 Dual-Band Router model BR-6476AC, specifically in version 1.06. The vulnerability exists in the router's web interface, within the GoAhead web server. It can be exploited through the '/goform/setStaticRoute', '/goform/fromSetFilterUrlFilter', and '/goform/fromSetFilterClientFilter' endpoints.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.