CVE-2020-35262 - Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter

Back Back to CVE browser

MEDIUM

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter

Published Jan 6, 2021

6.1

MEDIUM

CVSS 3.1

EPSS 0.87%

Description

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://github.com/the-girl-who-lived/CVE-2020-35262
ExploitThird Party Advisory
https://youtu.be/E5wEzf-gkOE
ExploitThird Party Advisory

Link	Providers	Tags
https://github.com/the-girl-who-lived/CVE-2020-35262		ExploitThird Party Advisory
https://youtu.be/E5wEzf-gkOE		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 6, 2021

Updated Jul 9, 2026

Reserved Dec 14, 2020

Link CVE-2020-35262

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jul 9, 2026

Link CVE-2020-35262

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-35262