CVE-2018-14497

This exploit demonstrates a stored XSS vulnerability in the Tenda D152 ADSL Router. By injecting a malicious script into the SSID field under 'Basic Settings', an attacker can execute arbitrary JavaScript in the context of the router's web interface.