CVE-2019-12195

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was disconnected. All the users become disconnected from the internet.

• CWE-79

• http://packetstormsecurity.com/files/153027/TP-LINK-TL-WR840N-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• https://www.tp-link.com/us/securityVendor Advisory
• http://packetstormsecurity.com/files/153027/TP-LINK-TL-WR840N-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• https://www.tp-link.com/us/securityVendor Advisory

Published

May 24, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12185eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via th…
• CVE-2019-12186An issue was discovered in Sylius products. Missing input sa…4.8
• CVE-2019-12189An issue was discovered in Zoho ManageEngine ServiceDesk Plu…
• CVE-2019-1219An information disclosure vulnerability exists when the Wind…5.5
• CVE-2019-12190XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS W…
• CVE-2019-12193H3C H3Cloud OS all versions allows SQL injection via the ear…
• CVE-2019-12196A SQL injection vulnerability in /client/api/json/v2/nfarepo…
• CVE-2019-12198In GoHttp through 2017-07-25, there is a stack-based buffer …
• CVE-2019-1220A security feature bypass vulnerability exists when Microsof…4.3
• CVE-2019-12203SilverStripe through 4.3.3 allows session fixation in the "c…6.3
• CVE-2019-12204In SilverStripe through 4.3.3, a missing warning about leavi…9.8
• CVE-2019-12205SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS…6.1