Cross site scripting

2024-01-1914:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

remote attackers

web script injection

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

JSON

Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata actiNAS-SL-2U-8 3.2.03-SP1 allow remote attackers to inject arbitrary web script or HTML.

CPENameOperatorVersion
actinas_sl_2u-8_rdx_firmwareeq3.2.3 sp1

CPE	Name	Operator	Version
	actinas_sl_2u-8_rdx_firmware	eq	3.2.3 sp1

References

actidata.com

github.com/saw-your-packet/CVEs/blob/main/CVE-2023-51946/README.md

www.actidata.com/index.php/de-de/actinas-plus-sl-2u-8-rdx