Vulnerabilities (CVE)

Filtered by vendor Inhandnetworks Subscribe
Filtered by product Inrouter302 Firmware
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-21238 1 Inhandnetworks 2 Inrouter302, Inrouter302 Firmware 2022-05-23 4.3 MEDIUM 6.1 MEDIUM
A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.