CVE-2018-18882

A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2019-03-21

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• X-320m-i Firmware (Controlbyweb)

References

• http://www.securityfocus.com/bid/106655
• https://applied-risk.com/labs/advisories