HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session.
References
| Link | Resource |
|---|---|
| https://www.exploit-db.com/exploits/47806 | Exploit Third Party Advisory VDB Entry |
| https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5556.php | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/47806 | Exploit Third Party Advisory VDB Entry |
| https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5556.php | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.exploit-db.com/exploits/47806 - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5556.php - Exploit, Third Party Advisory |
Information
Published : 2021-04-27 18:15
Updated : 2024-11-21 05:12
NVD link : CVE-2020-21987
Mitre link : CVE-2020-21987
CVE.ORG link : CVE-2020-21987
JSON object : View
Products Affected
homeautomation_project
- homeautomation
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')