CVE-2018-17051

The CVE concerns K-Net Cisco Configuration Manager up to 2014-11-19 with a Cross-Site Scripting (XSS) vulnerability exploitable via devices.php. CNVD notes it affects PHP/MySQL based deployments. NVD describes XSS via devices.php but does not provide exploit specifics beyond that. No remediation ...