NetSight
IP …
critical9.1

CVE-2022-25784

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting.

Impact

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.

Affected products

VendorProductAffected versions
SecomeaSitemanager 1129 Firmware
before 9.7.622134021
SecomeaSitemanager 1139 Firmware
before 9.7.622134021
SecomeaSitemanager 1149 Firmware
before 9.7.622134021
SecomeaSitemanager 3329 Firmware
before 9.7.622134021
SecomeaSitemanager 3339 Firmware
before 9.7.622134021
SecomeaSitemanager 3349 Firmware
before 9.7.622134021
SecomeaSitemanager 3529 Firmware
before 9.7.622134021
SecomeaSitemanager 3539 Firmware
before 9.7.622134021
SecomeaSitemanager 3549 Firmware
before 9.7.622134021

Weakness classification

CWE-79

References