💣Exploit CVE-2024-36140 - OZW672/772 Stored Cross-Site Scripting Vulnerability in User Accounts Tab

[Maksim]

CVE ID : CVE-2024-36140
Published : Nov. 12, 2024, 1:15 p.m. | 31 minutes ago
Description : A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2). The user accounts tab of affected devices is vulnerable to stored cross-site scripting (XSS) attacks. This could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later executed by another authenticated victim user with potential higher privileges than the attacker.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.