CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

CVE-2022-27280

The CVE-2022-27280 issue affects InHand Networks InRouter 900 Industrial 4G Router. A stored cross-site scripting (XSS) vulnerability exists in the web_exec parameter of the /apply.cgi endpoint. Affected versions are prior to 1.0.0.r11700. Root cause is unvalidated input being processed in the we...