CVE-2020-25786

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-09-19 · updated 2026-06-17
Weakness: CWE-79

Description

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header

Affected products

D-Link DIR-645: 1.06b01
D-Link DIR-803: 1.04.b02
D-Link DIR-815: 2.07.b01
D-Link DIR-816L: 2.06, 2.06.b09-beta
D-Link DIR-860L: 1.10b04
Dlink Dir-865L Firmware: 1.08b01

References

https://github.com/sek1th/iot/blob/master/DIR-816L_XSS.md
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10190
https://github.com/sek1th/iot/blob/master/DIR-816L_XSS.md
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10190

Get alerted when CVE-2020-25786 or the next vulnerability affects your stack