CVE-2018-17989

published 2019-04-01

CVE-2018-17989: A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1.01 that allows authenticated attackers to inject a JavaScript…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1.01 that allows authenticated attackers to inject a JavaScript or HTML payload inside the ACL page. The injected payload would be executed in a user's browser when "/cgi-bin/New_GUI/Acl.asp" is requested.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	dsl-3782_firmware	—	—

CWE-79