CVE-2020-25352

A stored cross-site scripting XSS vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote attackers to perform arbitrary Javascript execution through entering a crafted payload into the 'Model' field then saving...

CVE-2020-25352

A stored cross-site scripting XSS vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote attackers to perform arbitrary Javascript execution through entering a crafted payload into the 'Model' field then saving...

PT-2021-11128

Name of the Vulnerable Software and Affected Versions: inrConfig versions 3.9.5 Description: A stored cross-site scripting XSS issue in the /devices.php function allows remote attackers to execute arbitrary Javascript by entering a crafted payload into the Model field and saving. This enables...

CVE-2020-25352: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote attackers to perform arbitrary Javascript execution through entering a crafted payload into the 'Model' field then saving...