medium5.4
CVE-2021-20128
The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not pr…
Impact
The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Draytek | Vigorconnect | Version 1.6.0 |