CVE-2018-17441

published 2018-10-08

CVE-2018-17441: An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS.

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

EXPLOIT

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	central_wifimanager	1.00 – 1.03	—

CWE-79