Vulnerability Details CVE-2023-41781
There is a Cross-site scripting (XSS) vulnerability in ZTE MF258. Due to insufficient input validation of SMS interface parameter, an XSS attack will be triggered.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.4%
CVSS Severity
CVSS v3 Score 5.7
Products affected by CVE-2023-41781
-
-
cpe:2.3:o:zte:mf258_firmware:zte_std_v1.0.0b08
-
cpe:2.3:o:zte:mf258_firmware:zte_std_v1.0.0b10