Description
ISOinsight developed by NetVision Information has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetVision Information | ISOinsight | 2.9.0.* – < 2.9.0.250911, 3.0.0.* – < 3.0.0.251127 | 2.9.0.250911 |
References
- https://www.twcert.org.tw/tw/cp-132-10609-0221b-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10610-b98b4-2.html third-party-advisory