Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnerability that could be exploited by an attacker to mislead an administrator and steal their credentials.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
| Link | Tags |
|---|---|
| https://docs.terminalfour.com/release-notes/83/8.html | release notes vendor advisory |
| https://docs.terminalfour.com/release-notes/82/185.html | release notes vendor advisory |
| https://docs.terminalfour.com/release-notes/82/1821.html | release notes vendor advisory |
| https://bulletproofsi.com/wp-content/uploads/2022/08/Bulletproof_Vuls_Id_2022-30770.pdf | third party advisory exploit |
| https://bulletproofsi.com/wp-content/uploads/2022/10/Bulletproof_Vuls_Id_CVE-2022-30770.pdf | third party advisory exploit |