CVE-2022-22511 — WAGO PLCs WBM vulnerable to reflected XSS
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access…
Published: 2022-03-09 · CVSS: 5.4 · CVSS 3.1
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7