CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-07-05

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Syntera Customization Suite (Entrustdatacard)

References

• https://github.com/herwonowr/CVE/tree/master/CVE-2018-13252