Vulnerabilities (CVE)

Filtered by vendor Epson Subscribe
Filtered by product Eps Tse Server 8
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-28930 1 Epson 2 Eps Tse Server 8, Eps Tse Server 8 Firmware 2020-12-17 3.5 LOW 5.4 MEDIUM
A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.