CVE-2022-21146: Ipcomm Ipdio Firmware

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter. The XSS payload will be executed when a legitimate user attempts to review history.

Affected products

• Ipcomm Ipdio Firmware: version 3.9 only

Published 2022-03-10. Last modified 2026-06-17.