CVE-2020-5781

CVE-2020-5781 describes a denial-of-service vulnerability in IgniteNet HeliOS GLinq v2.2.1 r2961. An authenticated attacker can inject arbitrary JavaScript into the langSelection parameter, which is stored in the luci configuration file. This leads to a denial-of-service condition for all other users accessing the device. The vulnerability has a medium severity CVSS score of 4.3, indicating a low impact on availability with low attack complexity and no user interaction required. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.