CVE-2024-41584

DrayTek Vigor3910 devices running firmware version 4.3.2.6 and prior are vulnerable to a reflected cross-site scripting (XSS) attack. The root cause is the missing validation of the sFormAuthStr parameter in the web interface. This vulnerability can be exploited by authenticated users to perform ...