← CVE Intelligence

CVE-2023-2266

Improper neutralization of input during web page generation could lead to cross-site scripting based attacks PUBLISHED

Description (CNA)

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.

Affected (CNA)

Vendor / productVersions
Schweitzer Engineering Laboratories / SEL-411Laffected R118-V0 before R118-V4; affected R119-V0 before R119-V5; affected R120-V0 before R120-V6; affected R121-V0 before R121-V3; affected R122-V0 before R122-V3; affected R123-V0 before R123-V3; affected R124-V0 before R124-V3; affected R125-V0 before R125-V3; affected R126-V0 before R126-V4; affected R127-V0 before R127-V2; affected R128-V0 before R128-V1; affected R129-V0 before R129-V1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.