CVE-2024-4224

CVE-2024-4224: TP-Link TL-SG1016DE XSS

Vendor Tp-Link

Product TL-SG1016DE

Weakness CWE-79 · XSS

Published July 15, 2024

Last update August 1, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An authenticated stored cross-site scripting (XSS) exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DE(UN) V7.6_1.0.0 Build 20230616, which could allow an adversary to run JavaScript in an administrator's browser. This issue was fixed in TL-SG1016DE(UN) V7_1.0.1 Build 20240628.

Key dates

02Disclosure timeline

July 15, 2024 CVE published

August 1, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-4224

Related vulnerabilities

04Related CVE

CVE-2024-36992 Persistent Cross-site Scripting (XSS) in Dashboard Elements CVE-2026-32424 WordPress Sprout Clients plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-43757 CVE-2025-6725 Cross-Site Scripting (XSS) in PdfViewer CVE-2024-47647 WordPress FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability