CVE-2022-25344

The CVE-2022-25344 entry describes a reflected XSS in the web interface of the Kyocera/Olivetti d-COLOR MF3555 device (2XD_S000.002.271). The vulnerability stems from improper validation of POST parameters sent to /dvcset/sysset/set.cgi via the arg01.Hostname field, which are saved on the server ...