medium5.4
CVE-2021-46355
OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS).
Impact
OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability, the attacker needs to manipulate the name of some device on your computer, such as a printer, replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting (XSS).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Factorfx | Ocs Inventory | Version 2.9.1 |