Unscored CVE-2020-26801 EUVD-2020-19337GHSA-9wg4-hwfp-qf2w

A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 1…

Published Jun 25, 2021 · Updated Jul 9, 2026 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 12.04.0055. This vulnerability allows authenticated attackers to obtain other users' information via a crafted POST request.

References

https://www.blacklanternsecurity.com/2021-06-21-Tripplite-CVE/