CVE-2023-43260

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the admin panel.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.37% chance of exploitation in the next 30 days, 30th percentile

Published

2023-10-05

Updated

2024-09-19

Proof-of-concept exploits (1)

• https://gist.github.com/win3zz/c7eda501edcf5383df32fabe00938d13

References

• CVE Record
• NVD entry

Related

• CVE-2023-43252
• CVE-2023-43261
• CVE-2023-43251
• CVE-2023-43263
• CVE-2023-43250
• CVE-2023-43275