CVE-2023-6333 (published 2023-12-07T18:08:04.324Z)

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session.





Affected products: Vendor: ControlByWeb
Product: X-332-24I
Versions: Firmware 1.06