medium4.8
CVE-2020-7470
Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login with the Web Admin Password).
Impact
Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login with the Web Admin Password).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonoff | Th10 Firmware | Version 6.6.0.21 |
| Sonoff | Th16 Firmware | Version 6.6.0.21 |