| Package | Affected versions | Patched versions |
|---|---|---|
| powerpanel | = 3.4.0 |
A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious JavaScript in the SNMP trap receivers form. Upon visiting the /agent/action_recipient Event Action/Recipient page, the embedded code will be executed in the browser of the victim.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free