A vulnerability, which was classified as problematic, has been found in TOTOLINK A3002R 2.1.1-B20230720.1011. This issue affects some unknown processing of the component VPN Page. The manipulation of the argument Comment leads to cross site scripting.
The identification of this vulnerability is CVE-2025-4852. The attack may be initiated remotely. Furthermore, there is an exploit available.
