Medium · 6.1 CVE-2023-29836

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions (EUCS) v.1.0 allows a remote attacker to execute arbit…

Published Apr 26, 2023 · Updated Feb 3, 2025 · Assigned by mitre

Description

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions (EUCS) v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form.

References

https://github.com/IthacaLabs/Exelysis
https://github.com/IthacaLabs/Exelysis/blob/main/EUCS%20Admin%20Login%20XSS.txt