CVE-2023-0746 — XSS Vulnerability in GigaVue-FM
The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious Ja…
Published: 2023-03-10 · CVSS: 6.3 · CVSS 3.1
The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7