CVE-2018-13134

TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.

• CWE-79

• https://www.exploit-db.com/exploits/45970/Exploit, Third Party Advisory, VDB Entry
• https://www.xc0re.net/2018/05/25/tp-link-wireless-router-archer-c1200-cross-site-scripting/Third Party Advisory
• https://www.exploit-db.com/exploits/45970/Exploit, Third Party Advisory, VDB Entry
• https://www.xc0re.net/2018/05/25/tp-link-wireless-router-archer-c1200-cross-site-scripting/Third Party Advisory

Published

Jul 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13129SP8DE Token (SPX) is a smart contract running on Ethereum. T…
• CVE-2018-1313In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted n…5.3
• CVE-2018-13130Bitotal (TFUND) is a smart contract running on Ethereum. The…
• CVE-2018-13131SpadePreSale is a smart contract running on Ethereum. The mi…
• CVE-2018-13132Spadeico is a smart contract running on Ethereum. The mint f…
• CVE-2018-13133Golden Frog VyprVPN before 2018-06-21 has a vulnerability as…
• CVE-2018-13136The Ultimate Member (aka ultimatemember) plugin before 2.0.1…
• CVE-2018-13137The Events Manager plugin 5.9.4 for WordPress has XSS via th…
• CVE-2018-13139A stack-based buffer overflow in psf_memset in common.c in l…
• CVE-2018-1314In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" oper…
• CVE-2018-13140Druide Antidote through 9.5.1 on Windows and Linux allows re…
• CVE-2018-13144The transfer and transferFrom functions of a smart contract …7.5