CVE:CVE-2016-1207
CNNVD:CNNVD-201605-377
I-O DATA WN-G300R等都是日本I-O DATA公司的无线局域网路由器产品。
多款I-O DATA WN-G300R产品中存在跨站脚本漏洞。攻击者可利用该漏洞注入任意Web脚本或HTML。以下产品及版本受到影响：使用1.12及之前版本固件的I-O DATA WN-G300R，使用1.12及之前版本固件的I-O DATA WN-G300R2，使用1.01及之前版本固件的I-O DATA WN-G300R3。
solution:Upgrade iodata wn-g300r2_firmware to a higher version than 1.12,and avoid the version (,1.12]; Upgrade iodata wn-g300r3_firmware to a higher version than 1.01,and avoid the version (,1.01]; Upgrade iodata wn-g300r_firmware to a higher version than 1.12,and avoid the version (,1.12]