Description
Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dpid, (2) dpxid, or (3) pid parameter.
Advisories 1
- ICSA-23-115-02 Scada-LTS Third Party Component CISA ICS & IT advisories · Apr 28, 2023