ZeroHour

CVE-2020-15895

PoC
CVSS 3.1
6.1 medium
EPSS
3%p86
Published
()
Modified
Description

An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. In the file webinc/js/info.php, no output filtration is applied to the RESULT parameter, before it's printed on the webpage.

Vendors
dlink
Products
dir-816l firmware
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In the news