Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13 | release notes vendor advisory |
https://jvn.jp/en/vu/JVNVU92053563/index.html | third party advisory |