medium4.8
CVE-2025-63354
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter.
Impact
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitrontech | Hi3120 Firmware | Version 7.2.4.5.2b1 |