Beveiligingsadvies

CVE-2020-28930

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-12-16 20:26:33
Laatst bijgewerkt 2024-08-04 16:47:59
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.