CVE-2019-12460

Description

Web Port 1.19.1 allows XSS via the /access/setup type parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/EmreOvunc/WebPort-v1.19.1-Reflected-XSS/ ↗
• https://emreovunc.com/blog/en/WebPort-Reflected-XSS-01.png ↗
• http://packetstormsecurity.com/files/158174/WebPort-1.19.1-Cross-Site-Scripting.html ↗