
Cross-Site Scripting Armazenado - D-Link
██╗ ██╗███████╗███████╗
╚██╗██╔╝██╔════╝██╔════╝
╚███╔╝ ███████╗███████╗
██╔██╗ ╚════██║╚════██║
██╔╝ ██╗███████║███████║
╚═╝ ╚═╝╚══════╝╚══════╝
Roteador D-Link DSL-2730E - Cross Site Scripting Armazenado
Dispositivos D-Link DSL-2730E CT-20131125 permitem XSS através do parâmetro username na página de senha na configuração de manutenção.
Referências
https://nvd.nist.gov/vuln/detail/CVE-2021-46108
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46108