Cross site scripting

2022-09-2804:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

heimavista rpage

insufficient filtering

web url

unauthenticated attacker

xss attack

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.3%

JSON

Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

CPENameOperatorVersion
dark_horse_rpagelt5.4.103

CPE	Name	Operator	Version
	dark_horse_rpage	lt	5.4.103

References

www.twcert.org.tw/tw/cp-132-6523-d4c60-1.html