TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')