Description
An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arcadia Technology | Crafty Controller | ≤ 4.10.8 | — |