Design/Logic Flaw

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

CVE-2020-7235: Improper Neutralization of Input During Web Page Generation

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

PT-2020-19485

Name of the Vulnerable Software and Affected Versions UHP UHP-100 versions 3.4.1.15, 3.4.2.4, and 3.4.3 Description The issue allows for XSS via the cB3?ta= parameter, which is related to the profile title. Recommendations For versions 3.4.1.15, 3.4.2.4, and 3.4.3, consider restricting access to...