CVE-2023-6333 – Cross-site Scripting in ControlByWeb Relays

https://notcve.org/view.php?id=CVE-2023-6333

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session. Los productos ControlByWeb Relay afectados por una vulnerabilidad de cross-site scripting almacenada, que podría permitir a un atacante inyectar scripts arbitrarios en el endpoint de una interfaz web que podría ejecutar código javascript malicioso durante la sesión de un usuario. • https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-05 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •