CVE-2024-27684

published 2024-03-04

CVE-2024-27684: A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750_A1_FW_v101b03 allows remote…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750_A1_FW_v101b03 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	go-rt-ac750_firmware	—	—

CWE-79