rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2020-05-18T14:03:51
Updated: 2024-08-04T11:48:58.408Z
Reserved: 2020-04-26T00:00:00
Link: CVE-2020-12256

No data.

Status : Modified
Published: 2020-05-18T15:15:10.943
Modified: 2024-11-21T04:59:23.483
Link: CVE-2020-12256

No data.