CVE-2024-28092: Stored XSS vulnerability in UBEE DDW365 XCNDDW365 8.14.3105 allows attackers to inject malicious scripts. Remote attackers within Wi-Fi range can exploit this via multiple .asp pages, including RgFirewallEL.asp and RgDdns.asp. The affected fields allow injecting code via SMTP Server Name, Host Name, and more. While the CVSS score is 0, SOCRadar's SVRS of 30 suggests a moderate risk, highlighting potential exploitability and wider threat landscape relevance. This could lead to unauthorized access and data compromise for vulnerable devices. Immediate patching and configuration review are advised to mitigate potential exploits, especially given the "In The Wild" tag.