CVE-2022-39035
Smart eVision - Stored XSS
Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Smart eVision Information Technology Inc. · Smart eVisionQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →