CVE-2020-35262

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2021-01-06

Last modified

2026-07-09

Weaknesses

CWE-79

Affected products

• Dg-hr3400 Firmware (Digisol)

References

• https://github.com/the-girl-who-lived/CVE-2020-35262
• https://youtu.be/E5wEzf-gkOE