D-Link Central WiFi Manager Cross-Site Scripting Vulnerability

D-Link Central WiFi Manager is a WiFi management system from AUO D-Link. A cross-site scripting vulnerability exists in the 'username' parameter of the addUser endpoint in versions prior to D-Link Central WiFi Manager 1.03r0100-Beta1. A remote attacker can exploit this vulnerability to inject...