Unrated severityNVD Advisory· Published Jun 3, 2025· Updated Jun 4, 2025
TOTOLINK X2000R Parent Controls Page cross site scripting
CVE-2025-5543
Description
A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Parent Controls Page. The manipulation of the argument Device Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
2- TOTOLINK/X2000Rv5Range: 1.0.0-B20230726.1108
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/fizz-is-on-the-way/Iot_vuls/tree/main/X2000R/XSS_parent_controlmitreexploit
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
- www.totolink.netmitreproduct
News mentions
0No linked articles in our index yet.