Description (CNA)
XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary script content through the System Name field. Attackers can inject malicious scripts that execute in a victim's browser when the stored value is viewed due to improper output encoding.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Anhui Seeker Electronic Technology Co., LTD. / XikeStor SKS8310-8X | affected 0 through 1.04.B07 |
CWE
CWE-79
References
- https://www.aliexpress.com/i/3256808697772710.html
- https://openwrt.org/toh/xikestor/sks8310-8x?s%5B%5D=xikestor&s%5B%5D=sks8310&s%5B%5D=8x
ADP enrichment
No English description supplied.
No references supplied.