medium5.4
CVE-2024-25831
F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization.
Impact
F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F-Logic | Datacube3 | Version 1.0 |