PT-2020-19486

Name of the Vulnerable Software and Affected Versions UHP UHP-100 versions 3.4.1.15, 3.4.2.4, and 3.4.3 Description The issue allows for XSS via the cw2?td= parameter in the Site Name field of the Site Setup section. Recommendations For versions 3.4.1.15, 3.4.2.4, and 3.4.3, avoid using the cw2?t...

CVE-2020-7236: Improper Neutralization of Input During Web Page Generation

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...