Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-22	CVE-2020-28968	Cross-site Scripting vulnerability in Draytek products Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. network low complexity draytek CWE-79	5.4
2018-03-07	CVE-2017-11650	Cross-site Scripting vulnerability in Draytek Vigorap 910C Firmware 1.2.0 Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp. network low complexity draytek CWE-79	6.1