CVE-2023-38255 — Socomec MOD3GP-SY-120K Cross-site Scripting
A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device configuration t…
Published: 2023-09-18 · CVSS: 6.5 · CVSS 3.1
A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device configuration that could affect the intended function of the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7