Description
Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HEIMAVISTA | Rpage | unspecified – < 5.4.103 | 5.4.103 |