CVE-2018-7834

https://notcve.org/view.php?id=CVE-2018-7834

A CWE-79 Cross-Site Scripting vulnerability exists in all versions of the TSXETG100 allowing an attacker to send a specially crafted URL with an embedded script to a user that would then be executed within the context of that user. CWE-79: Existe una vulnerabilidad tipo Cross-Site Scripting en todas las versiones de TSXETG100, que permite a un atacante enviar una URL especialmente creada con un script integrado a un usuario que luego se ejecutaría dentro del contexto de ese usuario. • https://www.schneider-electric.com/en/download/document/SEVD-2019-134-07 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •