CVE-2025-63354

CVSS Score & Metrics

Base Score

4.6 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N                                    

Vulnerability Description

Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript.

Vulnerability Details

Published Date

February 09, 2026

Last Modified

February 11, 2026

CWE ID

CWE-79

Source

NVD

Vendor

hitrontech

Product

hi3120_firmware

External References

https://github.com/kakarotossj3/CVEs/blob/main/Hitron/XSS

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment