CVE-2024-42412

2024-08-3006:29:27

jpcert

github.com

cross-site scripting

wab-i1750-ps

wab-s1167-ps

improper processing

input values

menu.cgi

malicious web page

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Cross-site scripting vulnerability exists in WAB-I1750-PS and WAB-S1167-PS due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user’s web browser.