TOTOLINK N150RT Cross-Site Scripting Vulnerability in Virtual Server Page

A cross-site scripting vulnerability has been identified in the TOTOLINK N150RT router, specifically in version 3.4.0-B20190525. This issue arises within the Virtual Server Page component, where unknown code can be manipulated to execute malicious scripts. The vulnerability can be exploited remotely, and details of the exploit have been publicly disclosed.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.