EUVD-2021-19382

Malware in sbrugna...

CVE-2021-32536

The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks...

Cross site scripting

The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks...

CVE-2021-32536

Summary: CVE-2021-32536 affects the MCUsystem login page, where input is not filtered for special characters. This allows a remote attacker to inject JavaScript and perform a reflected XSS attack. The vulnerability is described across several sources (NVD, CVE list) as a login-page input validati...

CVE-2021-32536 MCU Technologies MCUsystem - Reflected XSS

The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks...