D-Link DAP-2695 Cross-Site Scripting Vulnerability in MAC Bypass Settings Page

A cross-site scripting (XSS) vulnerability has been identified in the D-Link DAP-2695 access point, specifically in the MAC Bypass Settings Page. This issue arises from an unknown processing flaw in the file '/adv_macbypass.php', where the argument 'f_mac' can be manipulated to inject malicious scripts. The vulnerability can be exploited remotely and affects products that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.