CVE-2021-33425

Published: 2021-05-25T14:15Z

Last Modified: 2024-11-21T06:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 which allows attackers to inject arbitrary Javascript in the OpenWRT Hostname via the Hostname Change operation. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt