CVE-2021-36603

Description

Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".

Related CPE's

References

https://github.com/arendst/Tasmota/issues/12221

CvssV3 impact

CvssV2 impact