Cross site scripting

2020-11-0515:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.3%

JSON

AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter “unique_error_numbers” is not set, remote attackers can inject arbitrary web script or HTML via ‘action, cargo, panel’ parameters that can lead to data leakage.

CPENameOperatorVersion
audimexeelt14.1.1

CPE	Name	Operator	Version
	audimexee	lt	14.1.1

References

github.com/piuppi/Proof-of-Concepts/blob/main/AudimexEE/Reflected-XSS.md

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for PRION:CVE-2020-28047