CVE-2020-15307

Nozomi Guardian prior to 19.0.4 is affected by a stored XSS in the web front end. The root cause is lack of proper validation of client data by the WEB application, enabling an attacker to inject a crafted field name via a custom field to execute client-side code. Affected product: Nozomi Guardia...