16 matches found
Home Assistant has stored XSS in Map-card through malicious device name
SummaryAn authenticated party can add a malicious name to their device entity, allowing for Cross-Site Scripting attacks against anyone who can see a dashboard with a Map-card which includes that entity. It requires that the victim hovers over an information point The lines or the dots representi...
8.8CVSS6.2AI score0.00282EPSS
SaveExploits1References5Affected Software1
20