Vulnerabilities > Battelle > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-12-28 CVE-2018-1000629 Cross-site Scripting vulnerability in Battelle V2I HUB 2.5.1
Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php script.
network
low complexity
battelle CWE-79
6.1