Threats tagged 'ghsa-3q23-2j2r-mmw3'

A stored Cross-Site Scripting (XSS) vulnerability exists in the ORing IAP-420 web interface due to missing input validation. This affects version 2.01e and earlier. The vulnerability allows an attacker with low privileges to execute arbitrary scripts without user interaction, potentially leading to full compromise of confidentiality, integrity, and availability.