← Database

CVE-2024-41584

MEDIUM CVSS: 4.7 Published: 2024-10-03 Modified: 2026-06-17

Description

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter.

Affected Platforms

Draytek Vigor3910Draytek Vigor3910 Firmware

Weakness Type

CWE-79

References