Vulnerabilities > Peplink > Surf Soho Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-11 CVE-2023-34354 Cross-site Scripting vulnerability in Peplink Surf Soho Firmware 6.3.5
A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU).
network
low complexity
peplink CWE-79
5.4