medium5.4
CVE-2020-26701
Cross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows remote attackers to inject malicious web scripts or HTML Injec…
Impact
Cross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows remote attackers to inject malicious web scripts or HTML Injection payloads via the Description parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kaaproject | Kaa | Version 1.2.0 |