CVE-2017-14413

D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 devices have XSS in the action parameter to htdocs/web/wpsacts.php...

CVE-2017-14413

D-Link DIR-850L REV.A devices (firmware through FW114WWb07_h2ab_beta1) are affected by a cross-site scripting (XSS) vulnerability in the action parameter of the /htdocs/web/wpsacts.php endpoint. The root cause is unsanitized input in the action parameter, enabling XSS (as reported for the host an...