Description

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting (XSS) attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content.

Related CPE's

Could not find any relations

References

https://cxsecurity.com/issue/WLB-2022060058

https://exchange.xforce.ibmcloud.com/vulnerabilities/229343

https://packetstormsecurity.com/files/167487/

https://www.jm-data.com/

https://www.vulncheck.com/advisories/jm-data-onu-jf-tv-authenticated-stored-cross-site-scripting-xss-vulnerability

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5708.php

Weaknesses

[email protected]

Primary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.3 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Received

Published

2025-12-30T23:15:47.470

2 hours ago

Last modified

2025-12-30T23:15:47.470

2 hours ago