CVE-2019-13070

A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious…

published July 9, 2019

CVSS
—
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious JavaScript in the SNMP trap receivers form. Upon visiting the /agent/action_recipient Event Action/Recipient page, the embedded code will be executed in the browser of the victim.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00761 · 54.8th percentile
Published
2019-07-09T18:05Z
EPSS history
Timeline
  • 09 JUL 18:05Z
    A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious…
    cvelistv5