Vulnerability Details CVE-2020-12256
rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.58
EPSS Ranking 98.1%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References