This vulnerability involves improper neutralization of input (CWE-79) in the TL-SG108PE v5 switch's web management interface. Specifically, the SYSNAM parameter is not properly sanitized during configuration file import, enabling stored XSS attacks. An attacker with administrator access can embed malicious scripts that persist in the device configuration and execute in the context of the administrator's browser. This can compromise session integrity and device management security. The CVSS 4.0 vector indicates the attack requires adjacent network access, low attack complexity, no attack vector privileges, and user interaction is required. The vulnerability is published but lacks an official fix or patch from TP-Link.

Successful exploitation allows an attacker with administrator privileges to execute arbitrary scripts in the administrator's browser session. This can result in theft of session cookies, unauthorized changes to device configuration, and access to sensitive information exposed via the management interface. The impact is limited to administrators who interact with the vulnerable interface and have the ability to import configuration files. The medium CVSS score reflects moderate risk due to required privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should exercise caution when importing configuration files and restrict administrative access to trusted personnel only. Monitoring for suspicious configuration changes may help detect exploitation attempts. No official patch or workaround has been provided by TP-Link at this time.