CVE-2022-26962

Italtel NFV 11.1.2-20210318 contains a Multiple Stored XSS vulnerability in the NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp page (specifically via the operation=list&object=announcementAS query). The vulnerable parameters are name , username , and mrfAnnouncementName . A malicious authentic...

EUVD-2022-56058

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...