← Back to CVE List

CVE-2020-12256

Published: 2020-05-18T15:15Z
Last Modified: 2024-11-21T04:59Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt