CVE-2019-18578

Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability. A low-privileged malicious remote user of XtremIO may exploit this vulnerability to store malicious HTML or JavaScript code in application fields. When victim users access the injected page through...

CVE-2019-18578

Dell EMC XtremIO XMS is affected in versions prior to 6.3.0 by a stored cross-site scripting vulnerability in the web application layer. A low-privileged remote attacker can inject HTML/JavaScript into application fields, which is executed in the context of the vulnerable web app when victims loa...