CVE-2013-5223 — D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability

provenance: imported · CVE: CVE-2013-5223

CVE-2013-5223: D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	D-Link
Product	DSL-2760U
Date added	2022-03-25
Due date	2022-04-15
Ransomware campaign use	Unknown

Description

A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-5223

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5223
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog