CVE-2017-14415

Summary of CVE-2017-14415 : A cross-site scripting (XSS) vulnerability exists in D-Link DIR-850L REV. A devices (firmware up to FW114WWb07_h2ab_beta1) in the action parameter of htdocs/web/sitesurvey.php. The root cause is unsanitized input for the action parameter, enabling an attacker to inject...