CVE-2018-20472

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2019-06-17

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Sahi Pro (Sahipro)

References

• http://packetstormsecurity.com/files/153332/Sahi-Pro-8.x-Cross-Site-Scripting.html
• https://barriersec.com/2019/06/cve-2018-20472-sahi-pro/