Medium severity6.1NVD Advisory· Published Jan 30, 2018· Updated Jun 17, 2026

CVE-2018-6355

Description

/goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Iball/300Mllm-create
Range: = iB-WRB302N_1.0.1-Sep 8 2017

Patches

Vulnerability mechanics

References

gist.github.com/MayurUdiniya/597169f582e506b610beb4e84fd8c8fcnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000