CVE-2024-41583

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting XSS by authenticated users due to poor sanitization of the router name...

CVE-2024-41583

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting XSS by authenticated users due to poor sanitization of the router name...

CVE-2024-41583

The DrayTek Vigor3910 router is vulnerable to stored Cross-Site Scripting (XSS) in versions 4.3.2.6 and prior . The root cause is the poor sanitization of the router name within the web interface. An authenticated user can exploit this to perform XSS attacks, which may lead to the execution of ar...