medium6.1
CVE-2019-20003
Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components.
Impact
Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components. This could be exploited when an attacker sends an crafted string for FTP authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dicube | Easescreen Crystal | Version 9.0.1.16265 |