CVE-2016-10719

CVE-2016-10719 describes an XSS vulnerability in TP-Link Archer CR-700 1.0.6 devices, allowing an attacker to inject malicious code via a crafted DHCP request. This enables the theft of administrative cookie information, which contains base64 encoded credentials. With a CVSS score of 6.1 (Medium), this vulnerability requires user interaction (UI:R) but can be exploited remotely (AV:N) with low attack complexity (AC:L), leading to potential disclosure of sensitive data (C:L) and modification of information (I:L). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.