CoreCVE
Back

MEDIUM

ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS)

Published Sep 28, 2022

Description

ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). Input passed to the GET parameter 'action' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user's browser session in context of an affected site.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 28, 2022
Updated May 20, 2025
Reserved Sep 19, 2022
Link CVE-2022-40912
CISA Vulnrichment
Updated May 20, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-40912
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-40912
ENISA EUVD
Assigner mitre
Published Sep 28, 2022
Updated May 20, 2025
Exploited since n/a
Link EUVD-2022-44164
EUVD-2022-44164