Description
It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Stormshield Stormshield Network Security
Default version status: unknown
4.8.0 to ≤ 4.8.16affected5.0.0 to ≤ 5.0.6affected4.8.17unaffected5.0.7unaffected5.1.0unaffected