CVE-2024-28091 is a stored XSS vulnerability affecting Technicolor TC8715D devices, allowing remote attackers within Wi-Fi range to execute malicious scripts. This vulnerability resides in the managed_services_add.asp page through User Defined Service. The victim has to click to trigger the exploit.

While CVE-2024-28091 has a CVSS score of 0 and an SVRS of 30, it is still a risk, as the 'In The Wild' tag indicates that this vulnerability has been observed being exploited. Successful exploitation could lead to unauthorized access, session hijacking, or defacement of the router's administrative interface. Although the SVRS score suggests lower criticality, the presence of the 'In The Wild' tag warrants further investigation and potential mitigation measures to prevent exploitation, especially if the device is accessible to untrusted Wi-Fi networks. Patching and user awareness are key to mitigating this cybersecurity threat.