EZCast Pro II Cross-Site Scripting Vulnerability

Multiple cross-site scripting vulnerabilities have been identified in the Admin UI of EZCast Pro II, all versions including 1.17478.146. These vulnerabilities allow attackers to execute arbitrary JavaScript in the browsers of other Admin UI users.

Impact

Exploitation of these vulnerabilities allows for cross-site scripting, where an attacker can inject and execute malicious scripts in the context of the user's browser.

Remediation

Users are advised to disconnect the dongle from the local network, limit usage to access point functionality, and change the default password.