CVE-2014-1407

no score yetEPSS 1.2%

conceptronic: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to inject arbitrary web script or HTML via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-01-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

conceptronic:c54apm
conceptronic:c54apm_firmware

References

http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
http://osvdb.org/101919
http://osvdb.org/101921
http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
http://osvdb.org/101919

Check your stack JSON