medium5.4
CVE-2023-34856
A Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code via uploading a crafted HTML file to the …
Impact
A Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /auth_pic.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Di-7500g-Ci Firmware | Version 19.05.29a |