CVE-2020-25786

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header

published September 19, 2020

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00988 · 62.1th percentile
Published
2020-09-19T19:24Z
EPSS history
Timeline
  • 19 SEP 19:24Z
    webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header
    cvelistv5