CVE-2026-32840 — Edimax GS-5008PL <= 1.00.54 Stored XSS via Device Name
Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inject arbitra…
Published: 2026-03-17 · CVSS: 5.1 · CVSS 4.0
Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inject arbitrary script code by manipulating the sysName parameter. Attackers can send a crafted POST request with malicious script payload that executes when management pages including system_data.js are viewed by administrators.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7