Vulnerabilities > Dlink > DSL 2680 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-03-04 CVE-2019-19222 Cross-site Scripting vulnerability in Dlink Dsl-2680 Firmware 1.03
A Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an authenticated attacker to inject arbitrary JavaScript code into the info.html administration page by sending a crafted Forms/wireless_autonetwork_1 POST request.
network
low complexity
dlink CWE-79
5.4