CVE-2020-22158: Improper Neutralization of Input During Web Page Generation

MediaKind formerly Ericsson RX8200 5.13.3 devices are vulnerable to multiple reflected and stored XSS. An attacker has to inject JavaScript code directly in the "path" or "Services+ID" parameters and send the URL to a user in order to exploit reflected XSS. In the case of stored XSS, an attacker...

PT-2020-15431

Name of the Vulnerable Software and Affected Versions MediaKind formerly Ericsson RX8200 version 5.13.3 Description The issue allows for both reflected and stored Cross-Site Scripting XSS attacks. An attacker can exploit reflected XSS by injecting JavaScript code into the path or Services+ID...