CVE-2020-28210

Published: 2020-11-19T21:15Z

Last Modified: 2024-11-21T05:22Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt