Wavlink WL-WN578W2 Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the Wavlink WL-WN578W2 router, specifically in version 221110. The issue arises in the POST request handler within the file '/cgi-bin/login.cgi'. The vulnerability can be exploited remotely by sending crafted POST requests that manipulate the 'homepage', 'hostname', or 'login_page' parameters. This exploitation does not require authentication but does involve user interaction.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a POST request to '/cgi-bin/login.cgi' with the 'page' parameter set to 'login'. Include a crafted value in the 'homepage' or 'hostname' parameter that contains script elements, such as an SVG tag with an 'onload' event. The injected script will be executed when the response is rendered in a browser.