Cross-Site Scripting Flaw in ELECOM Wireless LAN Routers

CVE-2024-21798

What is CVE-2024-21798?

ELECOM wireless LAN routers have a vulnerability that allows a malicious administrative user to configure the device with specially crafted content. This can lead to arbitrary script execution in the web browser of another administrative user who logs into the affected product. The issue can compromise the integrity of the network, highlighting the need for robust security measures and timely updates to prevent exploitation.

References