WEB SCO Openserver 5.0.7 section Reflected Cross-Site Scripting (CVE-2020-25495)

Rule ID

1235380

Severity

Medium

Description

A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section'.

Impact

Cross-site scripting

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A