Cross site scripting

ZEROF Web Server 2.0 allows /admin.back XSS...

CVE-2022-25323

CVE-2022-25323 affects ZEROF Web Server 2.0, with a cross-site scripting (XSS) vulnerability reachable via the /admin.back endpoint. Public docs identify CWE-79 and CVSS v3.1 base score 6.1 (NETWORK, LOW complexity, UI REQUIRED, changed scope; impact: confidentiality/integrity LOW, availability N...