ASUS RT-AX88U - Stored XSS

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/en/cp-139-7389-73a52-2.html
• https://www.twcert.org.tw/en/cp-139-6053-d9467-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2023-34360
• https://nvd.nist.gov/vuln/detail/CVE-2022-26673
• https://app.opencve.io/cve/CVE-2023-34360
• https://app.opencve.io/cve/CVE-2022-26673
• https://localh0st.run/post/asus-xss/
• https://www.clouddefense.ai/cve/2022/CVE-2022-26673
• https://github.com/advisories/GHSA-vf6p-785f-8qgq
• https://www.cybersecurity-help.cz/vdb/SB2022042604

Related Vulnerabilities

• Hepta Platforms｜Heptabase - Stored Cross-Site Scripting
• PoCCVE-2026-1115: parisneo/lollms < 2.2.0 - Authenticated Stored XSS
• PoCwp-livechat-stored-xss: WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS
• PoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API
• PoCCVE-2024-3231: Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
• PoCCVE-2025-1232: Site Reviews < 7.2.5 - Unauthenticated Stored XSS
• PoCCVE-2024-37259: WP Extended < 3.0.0 - Stored Cross-Site Scripting
• PoCCVE-2016-15041: MainWP Dashboard <= 3.1.2 - Stored Cross-Site Scripting
• PoCCVE-2012-10018: WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload
• PoCCVE-2021-24657: Limit Login Attempts WordPress - Stored Cross-site Scripting
• PoCCVE-2021-24681: Duplicate Page WordPress - Stored Cross-Site Scripting
• PoCCVE-2022-1029: Limit Login Attempts - Stored Cross-Site Scripting
• PoCCVE-2022-38130: KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution