CVE-2019-12702

The Cisco SPA100 Series Analogue Telephone Adapters are affected by a cross-site scripting vulnerability in the web-based management interface (CVE-2019-12702). The issue stems from insufficient validation of user-supplied input, allowing an authenticated attacker to lure a user into clicking a c...