ZTE's ZXCDN product has a reflective XSS vulnerability
published May 11, 2022
CVSS
—
EPSS
1%
Percentile
46.0
In the wild
Unconfirmed
What it is
ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks the url, an XSS attack will be triggered.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00562 · 46.0th percentile
Published
2022-05-11T15:11Z
EPSS history
Timeline
11 MAY 15:11Z
ZTE's ZXCDN product has a reflective XSS vulnerability