CVE-2023-28648 — CVE-2023-28648
Osprey Pump Controller version 1.01 inputs passed to a GET parameter are not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTM…
Published: 2023-03-28 · CVSS: 7.5 · CVSS 3.1
Osprey Pump Controller version 1.01 inputs passed to a GET parameter are not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user's browser session in context of an affected site.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7