Description (CNA)
A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Lenovo / XClarity Administrator (LXCA) | affected unspecified before 2.5.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.