← Database

CVE-2023-24497

MEDIUM CVSS: 4.7 Published: 2023-07-06 Modified: 2026-06-17

Description

Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the remote_subnet field of the database

Affected Platforms

O Milesight

Weakness Type

CWE-80

References