CVE-2024-28403 - TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page

MEDIUM

TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page

Published Mar 15, 2024

5.4

MEDIUM

CVSS 3.1

EPSS 0.39%

TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25500		Advisory
https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_5_VPN/XSS.md		ExploitThird Party Advisory
https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html		Product

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 15, 2024

Updated Mar 27, 2025

Reserved Mar 8, 2024

CISA Vulnrichment

Updated Mar 15, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 15, 2024

Updated Mar 27, 2025

GitHub

No data