CVE-2020-9419

Multiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary web script or HTML via the hostName and domain_name parameters present in the LAN configuration section of the administrative dashboard.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2022-12-14

Last modified

2025-04-22

Weaknesses

CWE-79

Affected products

• Vrv9506jac23 Firmware (Arcadyan)

References

• https://gist.github.com/AsherDLL/03d0762b5a535e300f1121caebe333ce