Security Advisory
CVE-2018-18882
5.4
MEDIUM
Vulnerability Description
A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface.
Published Date
March 21, 2019
Official Source
NIST NVD Advisory