Medium severity6.1NVD Advisory· Published Feb 10, 2022· Updated Jul 9, 2026

CVE-2021-41445

Description

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dir X1860 Firmware
cpe:2.3:o:dlink:dir-x1860_firmware:*:*:*:*:*:*:*:*
Range: <=1.03
D-Link/DIR-X1860description
Dlink/DIR-X1860llm-create
Range: <1.10WWB09_Beta

Patches

Vulnerability mechanics

References

supportannouncement.us.dlink.com/announcement/publication.aspxnvdPatchVendor Advisory
www.dlink.com/en/security-bulletin/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000