2 matches found
CVE-2020-12259
rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php...
5.4CVSS6.2AI score0.96179EPSS
SaveExploits0References1
CVE-2020-12259: Improper Neutralization of Input During Web Page Generation
rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php...
5.4CVSS6.7AI score0.96179EPSS
SaveExploits0References2
20