Cross site scripting

2020-04-0713:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

49.0%

JSON

A cross-site scripting (XSS) vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

CPENameOperatorVersion
clink_officeeq2.0

CPE	Name	Operator	Version
	clink_office	eq	2.0

References

www.deepcode.ca/index.php/2020/04/07/cve-2020-xss-in-clink-office-v2/

0.001 Low

EPSS

Percentile

49.0%

JSON

Related for PRION:CVE-2020-6171