CVE-2021-20128
N/A
N/A
Summary
The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Draytek VigorConnect | 1.6.0-B3 | affected |
Weaknesses
- Cross-site Scripting
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.