CVE-2025-63834
A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the ssid parameter of the wireless settings. Remote attackers can inject malicious payloads that execute when any user visits the router's homepage.
Vendor
Product
CWE
Yayın Tarihi
2025-11-10 17:15:35
Güncelleme
2025-12-01 20:15:54
Source Identifier
cve@mitre.org
KEV Date Added
-