high8.7
CVE-2026-55730
Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitr…
Impact
Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser and perform actions with the victim's privileges via a crafted link containing a malicious `project` or `mspParams` parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Loytec | Loytec LWEB-802 | before 5.0.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.