Description
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript.
Medium · 4.8
CVE-2025-63354
EUVD-2025-207360GHSA-ggxc-g84m-jp77
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handl…
Published Feb 9, 2026 · Updated Feb 17, 2026 · Assigned by mitre