VYPR
Unrated severityNVD Advisory· Published Feb 9, 2026· Updated Feb 17, 2026

CVE-2025-63354

CVE-2025-63354

Description

Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript.

Affected products

2
  • Hitron/HI3120description
  • Hitron/HI3120llm-create
    Range: = 7.2.4.5.2b1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.