Security Advisory

CVE-2021-29661

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-02 18:43:44

Last updated 2024-08-03 22:11:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it.

← Browse all CVEs View on cve.org ↗