Softing TH SCOPE through 3.70 allows XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://industrial.softing.com | product |
https://industrial.softing.com/fileadmin/psirt/downloads/2024/syt-2024-1.html | vendor advisory |