CVE-2026-24348CWE-20

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle

High · published January 27, 2026

CVSS v4.0
7.4
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

The record
Technical detail
CVSS v4.0
7.4 · HIGH
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U
EPSS
0.00165 · 5.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-01-27T09:31Z
EPSS history
Timeline
  • 27 JAN 09:31Z
    Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle
    cvelistv5