Description
Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter. The XSS payload will be executed when a legitimate user attempts to review history.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IPCOMM | IPCOMM ipDIO | 3.9 | — |
Advisories 1
- ICSA-22-062-01 IPCOMM ipDIO CISA ICS & IT advisories · Mar 3, 2022