2 matches found
CVE-2017-16564
Stored Cross-site scripting XSS vulnerability in /cgi-bin/config2 on Vonage Grandstream HT802 devices allows remote authenticated users to inject arbitrary web script or HTML via the DHCP vendor class ID field P148...
5.4CVSS5.7AI score0.00614EPSS
SaveExploits1References3
CVE-2017-16564: Improper Neutralization of Input During Web Page Generation
Stored Cross-site scripting XSS vulnerability in /cgi-bin/config2 on Vonage Grandstream HT802 devices allows remote authenticated users to inject arbitrary web script or HTML via the DHCP vendor class ID field P148...
5.4CVSS6AI score0.00614EPSS
SaveExploits1References2
20