Description
Reflected Cross-Site Scripting (XSS) vulnerability in Kelio Visio 1, Kelio Visio X7 and Kelio Visio X4, in versions between 3.2C and 5.1K. This vulnerability could allow an attacker to execute a JavaScript payload by making a POST request and injecting malicious code into the editable ‘username’ parameter of the ‘/PageLoginVisio.do’ endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kelio | Kelio Visio 1 | 3.2C – ≤ 5.1K | — |
| Kelio | Kelio Visio X7 | 3.2C – ≤ 5.1K | — |
| Kelio | Kelio Visio X4 | 3.2C – ≤ 5.1K | — |