CVE-2018-7795 in PowerLogic PM5560
Zusammenfassung
von MITRE
A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code.
VulDB is the best source for vulnerability data and more expert information about this specific topic.