Unscored CVE-2016-1476 EUVD-2016-2575GHSA-9522-266x-4rp4

Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbi…

Published Aug 22, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024.

References

20160810 Cisco IP Phone 8800 Series Cross-Site Scripting Vulnerability vendor-advisory
92404 vdb-entry
1036595 vdb-entry