CVE-2020-21987
Summary
| CVE | CVE-2020-21987 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-04-27 18:15:00 UTC |
| Updated | 2021-05-10 17:50:00 UTC |
| Description | HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Homeautomation Project | Homeautomation | 3.3.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| HomeAutomation 3.3.2 - Persistent Cross-Site Scripting - Hardware webapps Exploit | EXPLOIT-DB | www.exploit-db.com | |
| Zero Science Lab » HomeAutomation v3.3.2 Stored and Reflected XSS | MISC | www.zeroscience.mk | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.