Medium · 6.1 CVE-2023-29837 EUVD-2023-33374GHSA-8pm5-rr7v-8795

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution (EUCS) v.1.0 allows a remote attacker to gain privilege…

Published May 17, 2023 · Updated Jan 22, 2025 · Assigned by mitre

Description

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution (EUCS) v.1.0 allows a remote attacker to gain privileges via the URL path of the eucsAdmin login web page.

References

https://github.com/IthacaLabs/Exelysis
https://github.com/IthacaLabs/Exelysis/blob/main/EUCS%20Admin%20Login%20XSS_CVE-2023-29836_CVE-2023-29837.txt