Cross site scripting

2024-03-1404:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

remote attacker

firewall admin

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall ‘admin’ user to store and execute arbitrary JavaScript code.

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0005