CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Windows. Exploitation may require the attacker to be authenticated.
CVE
CVE-2018-10164
Severity
MEDIUM
CVSS
5.4
EPSS
0.63%
Windows
Original NVD Description
Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version 2.6.1_Windows.
Related CVEs
Other vulnerabilities affecting the same vendor(s)