Description
Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PLANEX COMMUNICATIONS | CS-QR10 | all firmware versions | — |
| PLANEX COMMUNICATIONS | CS-QR20 | all firmware versions | — |
| PLANEX COMMUNICATIONS | CS-QR22 | all firmware versions | — |
| PLANEX COMMUNICATIONS | CS-QR220 | all firmware versions | — |
| PLANEX COMMUNICATIONS | CS-QR300 | all firmware versions | — |