ID: CVE-2024-0554
Published: 2024-01-16T11:15Z
Description: description_data: A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via '/setup/diags_ir_learn.asp', allowing the attacker to retrieve the session details of another user.
CWE: problemtype_data: description: CWE-79