Threats tagged 'ghsa-c272-737g-r85g'

D-Link Nuclias Connect firmware versions up to 1.3.1.4 have a stored cross-site scripting (XSS) vulnerability. This flaw arises from improper sanitization of the 'Network' field during configuration editing, profile creation, and network addition. An authenticated attacker can inject malicious JavaScript that executes in the context of other users viewing the affected profile entry. D-Link has acknowledged the issue and is developing a fix.