CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version.

• CWE-79

• https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html
• https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html

Published

Jan 28, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-57498Cross Site Scripting vulnerability in sayski ForestBlog 2024…4.8
• CVE-2024-5750Rejected reason: ** REJECT ** Not a valid security issue.
• CVE-2024-57509Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602…7.8
• CVE-2024-5751BerriAI/litellm version v1.35.8 contains a vulnerability whe…9.8
• CVE-2024-57510Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602…7.8
• CVE-2024-57513A floating-point exception (FPE) vulnerability exists in the…6.5
• CVE-2024-57519An issue in Open5GS v.2.7.2 allows a remote attacker to caus…7.5
• CVE-2024-5752A path traversal vulnerability exists in stitionai/devika, s…9.1
• CVE-2024-57520Insecure Permissions vulnerability in asterisk v22 allows a …9.8
• CVE-2024-57521SQL Injection vulnerability in RuoYi v.4.7.9 and before allo…10
• CVE-2024-57522SourceCodester Packers and Movers Management System v1.0 is …6.4
• CVE-2024-57523Cross Site Request Forgery (CSRF) in Users.php in SourceCode…4.5