Cross site scripting

2017-10-0905:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

21.9%

JSON

IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) via the notes field in /~user_handler?file=logged_in.shtm (aka the edit user page).

CPENameOperatorVersion
two-reader_controller_configuration_managereq1.18.8-396

CPE	Name	Operator	Version
	two-reader_controller_configuration_manager	eq	1.18.8-396

References

raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/IDenticard%20Two-Reader%20Controller%20%3C%201.18.8%20-%20CVE-2017-14973

0.001 Low

EPSS

Percentile

21.9%

JSON

Related for PRION:CVE-2017-14973