PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest.
References
Link | Resource |
---|---|
https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10326 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-05-17 12:29
Updated : 2018-06-19 08:55
NVD link : CVE-2018-10326
Mitre link : CVE-2018-10326
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
printeron
- printeron