Description (CNA)
Genexis Platinum-4410 P4410-V2-1.31A contains a stored cross-site scripting vulnerability in the 'start_addr' parameter of the Security Management interface. Attackers can inject malicious scripts through the start source address field that will persist and trigger for privileged users when they access the security management page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Genexis / Platinum-4410 | affected Firmware 1.31A |
CWE
CWE-79
References
- https://www.exploit-db.com/exploits/49709
- https://genexis.eu/product/platinum-series/
- https://www.vulncheck.com/advisories/genexis-platinum-p-a-startaddr-persistent-cross-site-scripting
ADP enrichment
No English description supplied.
No references supplied.