Vulnerabilities > MI > Miwifi OS > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-11-27 CVE-2018-13022 Cross-site Scripting vulnerability in MI Miwifi OS 2.22.15
Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScript via a modified URL path.
network
low complexity
mi CWE-79
6.1