What the vulnerability does

01Description

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users.

Key dates

02Disclosure timeline

December 14, 2020 CVE published
August 5, 2024 Record updated