Schneider Electric Modicon Controllers Improper Neutralization of Input During Web Page Generation (CVE-2024-6528)

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim's browser run arbitrary JavaScript when they visit a page containing the...

CVE-2024-6528

creationtimestamp| type| source ---|---|--- 2024-07-11 11:37:48+00:00| seen| https://t.me/cvedetector/648 2024-12-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-07...

CVE-2024-6528

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the...

CVE-2024-6528

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the...

CVE-2024-6528

CVE-2024-6528 affects Schneider Electric Modicon Controllers (M241/M251/M258/M262 and LMC058 family) with a Cross-Site Scripting (CWE-79) vulnerability due to improper neutralization of input during web page generation. Attacker-controlled payloads on vulnerable pages can cause a victim’s browser...

CVE-2024-6528

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the...