CVE-2020-7470

CVE-2020-7470 affects Sonoff TH 10 and 16 devices running firmware 6.6.0.21, with a stored/reflected XSS in the Friendly Name 1 field that is exploitable after a successful login with the Web Admin Password. The available documents specify the affected hardware and the XSS condition but do not pr...

CVE-2020-7470: Improper Neutralization of Input During Web Page Generation

Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field after a successful login with the Web Admin Password...