Cross site scripting

2021-08-0206:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server’s Add New Device page.

CPENameOperatorVersion
openplceq<= 2016314

CPE	Name	Operator	Version
	openplc	eq	<= 2016314

References

www.youtube.com/watch?v=eSAqXq4m8so