CVE-2020-28930: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 21.0.11 allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator...

PT-2020-17061

Name of the Vulnerable Software and Affected Versions EPSON EPS TSE Server 8 version 21.0.11 Description A Cross-Site Scripting XSS issue in the 'update user' and 'delete user' functionalities in settings/users.php allows an authenticated attacker to inject a JavaScript payload in the user...