Unscored CVE-2021-20128 EUVD-2021-7585GHSA-vj36-fv2g-fcfx

The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as …

Published Oct 13, 2021 · Updated Aug 3, 2024 · Assigned by tenable

Description

The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized.

Affected products

Vendor	Product	Affected	Fixed
—	Draytek VigorConnect	1.6.0-B3	—

References

https://www.tenable.com/security/research/tra-2021-42