Vulnerability Description
A vulnerability classified as problematic has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the component URL Filtering Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Totolink | N150Rt Firmware | 3.4.0-b20190525 |
| Totolink | N150Rt | - |
Related Weaknesses (CWE)
References
- https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/XSS_Url_fileringExploitThird Party Advisory
- https://vuldb.com/?ctiid.308079Permissions RequiredVDB Entry
- https://vuldb.com/?id.308079Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.565956Third Party AdvisoryVDB Entry
- https://www.totolink.net/Product
FAQ
What is CVE-2025-4460?
CVE-2025-4460 is a vulnerability with a CVSS score of 2.4 (LOW). A vulnerability classified as problematic has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the component URL Filtering Page. The manipulation leads to cross site scri...
How severe is CVE-2025-4460?
CVE-2025-4460 has been rated LOW with a CVSS base score of 2.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-4460?
Check the references section above for vendor advisories and patch information. Affected products include: Totolink N150Rt Firmware, Totolink N150Rt.