Cross site scripting

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

CVE-2020-6876

The CVE-2020-6876 entry maps to a ZTE product (eVDC ZXCLOUD-iROSV6.03.04) with an XSS vulnerability caused by insufficient verification of client data in the WEB module. The issue enables a remote attacker to inject scripts into the web module, potentially stealing user cookies or altering page s...