CVE-2018-15874

published 2018-08-25

CVE-2018-15874: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	dir-615_firmware	—	—

CWE-79