OpenPLC ScadaBR Cross-site Scripting Vulnerability

OpenPLC ScadaBR contains a cross-site scripting vulnerability via systemsettings.shtm...

CVE-2021-26829

OpenPLC ScadaBR is vulnerable to a stored cross-site scripting (XSS) flaw via system_settings.shtm in Linux 0.9.1 and Windows 1.12.4. Root cause: input reflected/stored in the page enabling script execution in a user’s browser. Affected products/versions include OpenPLC ScadaBR prior to a newer r...

CVE-2021-26829

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via systemsettings.shtm...