Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-25784 EUVD-2022-30424GHSA-3hf3-rvvm-859m

User controllable HTML element attribute (potential XSS)

Published May 4, 2022 · Updated Aug 3, 2024 · Assigned by Secomea

Description

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.

Affected products

VendorProductAffectedFixed
Secomea SiteManager all – < 9.7 9.7

References