CVE-2020-28930

A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an…

published December 16, 2020

CVSS
—
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00633 · 49.7th percentile
Published
2020-12-16T20:26Z
EPSS history
Timeline
  • 16 DEC 20:26Z
    A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an…
    cvelistv5