Threats tagged 'ghsa-fcx8-3xwg-jjq7'

A stored Cross-Site Scripting (XSS) vulnerability exists in the web interface of the ORing IAP-420 device due to missing input validation. This affects version 2.01e and earlier. The vulnerability allows an attacker with limited privileges to inject malicious scripts that can be stored and later executed in the context of other users. The CVSS score is 5.4, indicating a medium severity impact primarily affecting confidentiality and integrity with no impact on availability.