CVE-2022-39035
Smart eVision - Stored XSS
Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Smart eVision Information Technology Inc. · Smart eVisionWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →