2 matches found
CVE-2017-13754: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration.html...
5.4CVSS6AI score0.03877EPSS
SaveExploits7References2
PT-2017-13076
Name of the Vulnerable Software and Affected Versions Wibu-Systems CodeMeter versions prior to 6.50b Description A cross-site scripting XSS issue exists in the "advanced settings - time server" module, allowing remote attackers to inject arbitrary web script or HTML via the server name field in t...
5.4CVSS0.03877EPSS
SaveExploits7References9
20