Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-9419 EUVD-2020-30239GHSA-r8rh-2mfh-6v8x

Multiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary…

Published Dec 14, 2022 · Updated Apr 22, 2025 · Assigned by mitre

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary web script or HTML via the hostName and domain_name parameters present in the LAN configuration section of the administrative dashboard.

References