CVE-2018-15875

Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-08-25

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Dir-615 Firmware (Dlink)

References

• https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_UPnP/dlink_dir615_xss_upnp.md