rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-05-18T14:03:51

Updated: 2024-08-04T11:48:58.408Z

Reserved: 2020-04-26T00:00:00

Link: CVE-2020-12256

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-05-18T15:15:10.943

Modified: 2024-11-21T04:59:23.483

Link: CVE-2020-12256

cve-icon Redhat

No data.