CVE-2019-11370

creationtimestamp| type| source ---|---|--- 2024-12-27 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-27 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-30 00:00:00+00:00| exploited| The Shadowserver...

CVE-2019-11370

Summary: CVE-2019-11370 affects Carel pCOWeb prior to B1.2.4. The issue is a stored cross-site scripting (XSS) vulnerability in the web interface, demonstrated via the config/pw_snmp.html “System contact” field. Affected component: Carel pCOWeb web application; root cause: lack of proper validati...