5.4
Moyenne
CVE-2024-6528 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Modicon Controllers M241 / M251 | Versions non publiées | |
| Modicon Controllers M258 / LMC058 | Versions non publiées | |
| Modicon Controllers M262 | Versions non publiées |