CVE-2017-9366

Published: 2017-06-02T05:29Z

Last Modified: 2024-11-21T03:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboard/Dashboard_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tab_name parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt