CVE-2024-8457 — PLANET Technology switch devices - Stored cross-site scripting (XSS) in the User Management
Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator p…
Published: 2024-09-30 · CVSS: 4.8 · CVSS 3.1
Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator privileges to inject arbitrary JavaScript, leading to Stored XSS attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7