2 matches found
Cross site scripting
An issue was discovered in Selesta Visual Access Manager VAM 4.15.0 through 4.29. Multiple Stored Cross-site scripting XSS vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /monitor/sheadmodel.php and /vam/vamuser.php...
3.5CVSS5.2AI score0.00856EPSS
SaveExploits1References3Affected Software1
CVE-2019-19990: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Selesta Visual Access Manager VAM 4.15.0 through 4.29. Multiple Stored Cross-site scripting XSS vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /monitor/sheadmodel.php and /vam/vamuser.php...
5.4CVSS6.1AI score0.00856EPSS
SaveExploits1References2
20