Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-91652
HistorySep 30, 2022 - 12:00 a.m.

Etaplighting Etap Safety Manager Cross-Site Scripting Vulnerability

2022-09-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
etap safety manager
cross-site scripting
vulnerability
html
js
browser session
etaplighting
management system
emergency lighting
security document

0.001 Low

EPSS

Percentile

34.2%

ETAP Safety Manager is a management system where users observe, configure and maintain emergency lighting. Etaplighting Etap Safety Manager version 1.0.0.32 is vulnerable to a cross-site scripting vulnerability that stems from action parameters not being properly cleared before being returned to the user, which could be exploited by an attacker to execute arbitrary HTML/JS code in the affected site context of the user’s browser session to execute arbitrary HTML/JS code.

0.001 Low

EPSS

Percentile

34.2%

Related for CNVD-2022-91652