Description
A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | XClarity Administrator (LXCA) | unspecified – < 2.5.0 | 2.5.0 |