Ericom PowerTerm WebConnect Cross-Site Scripting Vulnerability

Ericom PowerTerm WebConnect is a web browser. version 6.0 of Ericom PowerTerm WebConnect is vulnerable to a cross-site scripting vulnerability that originates when the login portal insecurely writes a cross-site scripting attack load to a page from an AppPortal cookie. An attacker could exploit...

CVE-2022-29152

The CVE-2022-29152 entry concerns Ericom PowerTerm WebConnect 6.0 Login Portal. Multiple sources (NVD, CNVD, Red Hat advisories, CVE list) describe a cross-site scripting vulnerability where an XSS payload from the AppPortal cookie can be written into the page, enabling client-side JavaScript exe...