{"vulnerability": "CVE-2021-20128", "sightings": [{"uuid": "2043486f-257d-42f3-afde-5ae2e579323a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20128", "type": "seen", "source": "https://t.me/cibsecurity/30524", "content": "\u203c CVE-2021-20128 \u203c\n\nThe Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-13T20:26:53.000000Z"}]}