The vulnerability in the bsc_lan.php script of the D-Link DIR‑818LW router’s software allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability in the bsclan.php script of the D-Link DIR‑818LW router’s microprogramming software relates to the lack of protection for the website structure when processing the Name parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

CVE-2025-9003: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in D-Link DIR-818LW 1.04. This vulnerability affects unknown code of the file /bsclan.php of the component DHCP Reserved Address Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. This vulnerability on...