NetSight
IP …
medium5.4

CVE-2024-6528

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a…

Impact

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M241 Firmware
All versions
Schneider-ElectricModicon M251 Firmware
All versions
Schneider-ElectricModicon M258 Firmware
All versions
Schneider-ElectricModicon M262 Firmware
All versions
Schneider-ElectricModicon Lmc058 Firmware
All versions

Weakness classification

CWE-79

References