CVE-2023-49260

CVE-2023-49260: Stored cross-site scripting vulnerability

Vendor Hongdian

Product H8951-4G-ESP

Weakness CWE-79 · XSS

Published January 12, 2024

Last update June 3, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.

Key dates

02Disclosure timeline

January 12, 2024 CVE published

June 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-49260 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-68927 Improper Neutralization of HTML Tags in a Web Page in libredesk CVE-2023-25028 WordPress CC Custom Taxonomy Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-2560 jja8 NewBingGoGo cross site scripting CVE-2023-5701 vnotex vnote Markdown File cross site scripting CVE-2025-49311 WordPress The Events Calendar Countdown Addon plugin <= 1.4.9 - Cross Site Scripting (XSS) Vulnerability