Vulnerabilities (CVE)

Filtered by vendor Rockoa Subscribe
Filtered by product Rockoa
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-21147 1 Rockoa 1 Rockoa 2021-01-29 3.5 LOW 4.8 MEDIUM
RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.