Edimax GS-5008PL Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Edimax GS-5008PL switch, affecting firmware versions through 1.00.54. The issue resides in the system_name_set.cgi script, where the sysName parameter can be manipulated to inject arbitrary script code. This injected script executes when an administrator views certain management pages, including system_data.js.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the affected management pages.