2 matches found
Cross site scripting
A Cross-site scripting XSS vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via '/setup/diagsirlearn.asp', allowing the attacker to retrieve the session details of another user...
4.9CVSS6AI score0.00293EPSS
SaveExploits0References1Affected Software1
CVE-2024-0554 Cross-site scripting (XSS) vulnerability on WIC1200
A Cross-site scripting XSS vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via '/setup/diagsirlearn.asp', allowing the attacker to retrieve the session details of another user...
5.5CVSS5.5AI score0.00293EPSS
SaveExploits0References1
20