medium6.1
CVE-2017-5157
An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0.
Impact
An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider Electric | Homelynk Controller Lss100100 Firmware | Version 1.3.0 |