CVE-2022-39035
Smart eVision - Stored XSS
Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Productos afectados
Smart eVision Information Technology Inc. · Smart eVision¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →