medium6.1
CVE-2022-39035
Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function.
Impact
Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lcnet | Smart Evision | Version 2022.02.21 |