CVE-2021-22676

UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting XSS, which could allow an attacker to send malicious JavaScript code. This could result in hijacking of cookie/session tokens, redirection to a malicious webpage, and unintended browser action on the WebAccess/SCADA...

CVE-2021-22676

creationtimestamp| type| source ---|---|--- 2021-08-10 18:37:17+00:00| seen| https://t.me/cibsecurity/27063...

CVE-2021-22676

CVE-2021-22676 affects Advantech WebAccess/SCADA: UserExcelOut.asp is vulnerable to cross-site scripting (XSS), enabling attackers to run malicious JavaScript and hijack cookie/session tokens or redirect users. Affected versions are WebAccess/SCADA prior to 8.4.5 and prior to 9.0.1 (desktop/SCADA...