CVE-2018-15874

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.1MEDIUM

EPSS

0.3%

top 46.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dlink Dir-615 Firmware

Timeline

PublishedAug 25

Latest updateMay 13

Description

Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶NVDdlink/dir-615_firmware20.07

🔴Vulnerability Details

GHSA

GHSA-c7f9-gprv-h5hq: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20↗2022-05-13

▶

CVEList

CVE-2018-15874: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20↗2018-08-25

▶