Vulnerabilities > D Link > DIR 600M Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-07-20 CVE-2017-10676 Cross-site Scripting vulnerability in D-Link Dir-600M Firmware Fw3.05B01
On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter.
network
low complexity
d-link CWE-79
6.1