An authenticated stored cross-site scripting vulnerability in the OpenWrt LuCI HTTPS DNS Proxy application could allow an attacker to execute malicious scripts in an administrator's browser.

This is a stored cross-site scripting (XSS) vulnerability within the resolver_url parameter. It requires an authenticated user to perform the injection, which then executes when an administrator views the status page.

Successful exploitation of this flaw could lead to session hijacking and unauthorized administrative actions within the OpenWrt interface. Given the CVSS score of 7.6, this represents a significant risk to the integrity and security of network management infrastructure.

Immediate Action: Review the official OpenWrt security advisory at https://github.com/openwrt/luci/security/advisories/GHSA-c6vf-395q-4jv6 for specific patch instructions.

Proactive Monitoring: Monitor system access logs for suspicious administrative activity or unusual characters within configuration parameters.

Compensating Controls: Restrict administrative access to the LuCI interface to trusted internal networks only.

Public Exploit Available: No (unknown)

Administrators should prioritize verifying the status of their LuCI installations against the vendor advisory. Apply all recommended security updates as they become available to prevent potential session compromise.