CVE 4.8 MEDIUM

Edimax BR-6288ACL wiz_WISP24gmanual.asp wiz_WISP24gmanual cross site scripting_CVE-2026-1971

4.8 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file wiz_WISP24gmanual.asp. Such manipulation of the argument manualssid leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor confirms that the affected product is end-of-life. They confirm that they "will issue a consolidated Security Advisory on our official support website." This vulnerability only affects products that are no longer supported by the maintainer.

Basic Information

ID CVE-2026-1971
Source VulDB
Published Feb 6, 2026 at 00:02

Affected Product

Vendor Edimax
Product BR-6288ACL
Version 1.0
Affected Versions Edimax BR-6288ACL 1.0
Edimax BR-6288ACL 1.1
Edimax BR-6288ACL 1.2
Edimax BR-6288ACL 1.3
Edimax BR-6288ACL 1.4
Edimax BR-6288ACL 1.5
Edimax BR-6288ACL 1.6
Edimax BR-6288ACL 1.7
Edimax BR-6288ACL 1.8
Edimax BR-6288ACL 1.9
Edimax BR-6288ACL 1.10
Edimax BR-6288ACL 1.11
Edimax BR-6288ACL 1.12

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.