CVE-2020-24390

eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/adminlogs page, which might allow pre-authentication stored XSS during login/logout logs recording...

CVE-2020-24390

eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/adminlogs page, which might allow pre-authentication stored XSS during login/logout logs recording...

CVE-2020-24390

CVE-2020-24390 affects EyesOfNetwork’s web interface (eonweb), specifically pre-5.3-7 builds. The vulnerability is a lack of proper escaping of the username on the /module/admin_logs page, which can allow pre-authentication stored XSS in login/logout logs. Public sources confirm affected versions...