Description
It’s possible to run a stored XSS in Stormshield’s web administration panel.
To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Stormshield | Stormshield Network Security | 4.8.0 – ≤ 4.8.16, 5.0.0 – ≤ 5.0.6 | 4.8.17 |