CVE-2017-14973

IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) via the notes field in /~user_handler?file=logged_in.shtm (aka the edit user page).

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-10-09

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Two-reader Controller Configuration Manager (Identicard)

References

• https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/IDenticard%20Two-Reader%20Controller%20%3C%2…