FiberHome AN5506-01A ONU GPON RP2511 Port Forwarding Submenu Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in the FiberHome AN5506-01A ONU GPON RP2511, specifically within the Port Forwarding Submenu. The issue arises in an unknown function of the file '/goform/portForwardingCfg', where the argument 'pf_Description' can be manipulated to inject malicious scripts. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.