Cross site scripting

2023-06-2718:15:00

PRIOn knowledge base

www.prio-n.com

microworld technologies

escan

management console

cross site scripting

vulnerability

remote attacker

javascript code

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable delete_file parameter.

CPENameOperatorVersion
escan_management_consoleeq14.0.1400.2281

CPE	Name	Operator	Version
	escan_management_console	eq	14.0.1400.2281

References

github.com/sahiloj/CVE-2023-34835/blob/main/README.md