CVE-2019-13491

Tenda D301 v2 Modem Router - Persistent Cross-Site Scripting

STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-13491. PoCs published by ABDO10.

AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Tenda D301 v2 modem routers. The payload is injected into the wireless security password field, triggering when the 'click to display' button is pressed.

Description

Tenda D301 v2 Modem Router - Persistent Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC
by ABDO10 · textwebappshardware
https://www.exploit-db.com/exploits/47107

This exploit demonstrates a stored XSS vulnerability in Tenda D301 v2 modem routers. The payload is injected into the wireless security password field, triggering when the 'click to display' button is pressed.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Tenda D301 v2 Modem Router
Auth required
Prerequisites: Access to the router's admin interface · Valid credentials to modify wireless settings
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status draft
Tracked Since Feb 18, 2026