EUVD-2017-7760

Malware in sbrugna...

CVE-2017-16568: Improper Neutralization of Input During Web Page Generation

Persistent Cross-Site Scripting XSS vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality. This vulnerability allows attackers to inject malicious JavaScript payloads, which become permanently stored on the server and execute when a user plays the compromised radio...