Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-4224

TP-Link TL-SG1016DE XSS

Description

An authenticated stored cross-site scripting (XSS) exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DE(UN) V7.6_1.0.0 Build 20230616, which could allow an adversary to run JavaScript in an administrator's browser. This issue was fixed in TL-SG1016DE(UN) V7_1.0.1 Build 20240628.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link TL-SG1016DE

Default version status: unaffected

  • 0 to ≤ V7.6_1.0.0 Build 20230616affected

References