CVE-2017-16765

MEDIUM

D-Link DWR-933 1.00(WW)B17 - Cross-Site Scripting via cgi-bin/gui.cgi

Title source: llm

XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi.

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

CVSS v3 6.1

EPSS 0.0036

EPSS Percentile 58.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (1)

dlink/dwr-933_firmware 1.00\(ww\)b17

Published Nov 10, 2017

Tracked Since Feb 18, 2026