← Back to CVE List

CVE-2020-12259

Published: 2020-05-18T13:15Z
Last Modified: 2024-11-21T04:59Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt