CVE-2023-34856

A Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /auth_pic.cgi.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2023-06-09

Last modified

2025-01-06

Weaknesses

CWE-79

Affected products

• Di-7500g-ci Firmware (Dlink)

References

• https://github.com/hashshfza/Vulnerability/issues/2