What’s Vulnerable › Vulnerabilities

CVE-2022-50801: JM-DATA ONU JF511-TV 1.0.67 Authenticated Stored Cross-Site Scripting (XSS) Vulnerability

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17
• Weakness: CWE-79

Description

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting (XSS) attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content.

Affected products

• JM-DATA ONU JF511-TV: 1.0.67, 1.0.62, 1.0.55

References

• https://cxsecurity.com/issue/WLB-2022060058
• https://exchange.xforce.ibmcloud.com/vulnerabilities/229343
• https://packetstormsecurity.com/files/167487/
• https://www.jm-data.com/
• https://www.vulncheck.com/advisories/jm-data-onu-jf-tv-authenticated-stored-cross-site-scripting-xss-vulnerability
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5708.php

Get alerted when CVE-2022-50801 or the next vulnerability affects your stack