Cross site scripting

2021-06-2513:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 12.04.0055. This vulnerability allows authenticated attackers to obtain other users’ information via a crafted POST request.

CPENameOperatorVersion
su2200rtxl2ua_firmwareeq12.04.0055

CPE	Name	Operator	Version
	su2200rtxl2ua_firmware	eq	12.04.0055

References

su2200rtxl2ua.com

tripplite.com

www.blacklanternsecurity.com/2021-06-21-Tripplite-CVE/