← Database

CVE-2024-41583

MEDIUM CVSS: 4.7 Published: 2024-10-03 Modified: 2026-06-17

Description

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due to poor sanitization of the router name.

Affected Platforms

Draytek Vigor3910Draytek Vigor3910 Firmware

Weakness Type

CWE-79

References