CVE-2019-13374

published 2019-07-06

CVE-2019-13374: A cross-site scripting (XSS) vulnerability in resource view in PayAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

A cross-site scripting (XSS) vulnerability in resource view in PayAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to inject arbitrary web script or HTML via the index.php/Pay/passcodeAuth passcode parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	central_wifimanager	—	—

CWE-79