Description (CNA)
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st[] parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.nedi.ch/download/
- https://gist.github.com/sudoninja-noob/c1722c118abc7a562a9a0de726266a19
ADP enrichment
No English description supplied.