CVE-2014-10028: Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML…

PriorityP417medium4.3CVSS 2.0

AVNACMAuNCNIPAN

EPSS

1.00%

58.5th percentile

Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is set to 41.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	dap-1360_firmware	<= 2.5.4	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.