CVE-2017-9623

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data...

CVE-2017-9623

Telaxus EPESI is affected by multiple XSS vulnerabilities in version 1.8.2 and earlier, exploitable via crafted country data. The issue is the ability for remote attackers to inject arbitrary web script or HTML into the user’s browser. OpenVAS indicates a fix in EPESI