CVE-2018-16134

CVE-2018-16134 affects CyBroHttpServer v1.0.3 by Cybrotech. The vulnerability is a reflected XSS via a crafted URI, enabling script injection in the server response. Public PoCs/exploits exist (e.g., Exploit-DB, PacketStorm) showing a simple payload. CVSS scores in the records: CVSSv2 base 4.3 (...