Cross site scripting

Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php...

CVE-2015-2883

Philips In.Sight B120/37 is affected by a cross-site scripting (XSS) vulnerability, related to the Weaved cloud web service. The issue can be triggered via the name parameter in deviceSettings.php or shareDevice.php. The Common result is that arbitrary script/HTML could be injected, potentially a...

PT-2017-6619

Name of the Vulnerable Software and Affected Versions Philips In.Sight B120/37 Description The issue is related to the Weaved cloud web service and involves XSS. This can be demonstrated by the name parameter to "deviceSettings.php" or "shareDevice.php" endpoints. Recommendations For Philips...

CVE-2015-2883: Improper Neutralization of Input During Web Page Generation

Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php...