Medium severity6.1NVD Advisory· Published Dec 7, 2021· Updated Jun 17, 2026

CVE-2021-44148

Description

GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name.

Affected products

Gl Inet/Gl Ar150 Firmware
cpe:2.3:o:gl-inet:gl-ar150_firmware:*:*:*:*:*:*:*:*
Range: >=2.0,<3.0
GL.iNet/GL-AR150description
Gl Inet/GL-AR150llm-fuzzy
Range: <3.x

Patches

Vulnerability mechanics

References

beaugraham.com/CVE-2021-44148-xss.htmlnvdExploitPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000