### [CVE-2018-5967](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5967) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page. ### POC #### Reference - https://packetstormsecurity.com/files/145513/Netis-WF2419-HTML-Injection.html #### Github No PoCs found on GitHub currently.