← Database

CVE-2022-41313

MEDIUM CVSS: 5.4 Published: 2023-02-07 Modified: 2026-06-17

Description

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form field id="switch_contact"

Affected Platforms

Moxa Sds-3008Moxa Sds-3008 FirmwareMoxa Sds-3008-TMoxa Sds-3008-T Firmware

Weakness Type

CWE-79, CWE-79

References