Cisco Small Business IP Phones Flaw Allows XSS & Injection Attacks

Cisco has published a security advisory that states that they have discovered two vulnerabilities, an XSS and an HTML injection vulnerability. These vulnerabilities existed in the SPA500 series of the Cisco Small Business IP Phones. CVE-2023-20181: XSS Vulnerability This vulnerability exists due to insufficient validation of user-supplied input in the web-based management interface of Cisco […]

The post Cisco Small Business IP Phones Flaw Allows XSS & Injection Attacks appeared first on GBHackers - Latest Cyber Security News | Hacker …

advisory attacks business cisco cve flaw html html injection injection injection attacks input ip phones phones security security advisory series states validation vulnerabilities vulnerability xss