medium6.1
CVE-2018-17981
Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.
Impact
Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lifesize | Express 220 Firmware | Version ls_ex2_4.7.10_2000_\(14\) |
| Lifesize | Room 220i Firmware | Version ls_rm2_4.11.8_\(14\) |