Domoticz Cross-Site Scripting Vulnerability

Domoticz is an open source smart home system. The system supports monitoring and controlling a wide range of smart home devices. A cross-site scripting vulnerability exists in Domoticz version 4.10717, which can be exploited by an attacker to execute client-side code...

CVE-2019-15480

Domoticz 4.10717 has XSS via item.Name...

Cross site scripting

Domoticz 4.10717 has XSS via item.Name...

CVE-2019-15480

Domoticz 4.10717 has XSS via item.Name...

CVE-2019-15480

Domoticz 4.10717 is vulnerable to a Cross‑Site Scripting (XSS) flaw in property item.Name, as cited in CVE-2019-15480. Public entries describe an XSS that can enable client‑side code execution (CNVD-2019-29120; NVD entry). CVSS data indicate a low to medium overall impact: CVSSv2 base 3.5 (LOW) w...