CVE-2026-24348

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle PUBLISHED

Description (CNA)

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

Affected (CNA)

Vendor / product	Versions
EZCast / EZCast Pro II	affected 1.17478.146

CWE

CWE-20

References

https://hub.ntc.swiss/ntcf-2025-145332

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.