Vulnerability Database

322,904

Total vulnerabilities in the database

CVE-2019-12195

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was disconnected. All the users become disconnected from the internet.

  • Published: May 24, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-12195
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
tp-link / tl-wr840n_firmware 0.9.1_3.16 0.9.1_3.16.x