CVE-2020-28210 - AskarLabs CVE Database

CVE-2020-28210

Vendor N/A

Product EcoStruxure Building Operation WebStation V2.0 - V3.1

Weakness CWE-79 · XSS

Published November 19, 2020

Last update May 28, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.

Key dates

02Disclosure timeline

November 19, 2020 CVE published

May 28, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-28210 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-3427 SourceCodester Online Courseware addq.php cross site scripting CVE-2020-15119 DOM-based XSS in auth0-lock CVE-2024-29108 WordPress Happy Addons for Elementor plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-27969 WordPress Free Downloads WooCommerce plugin <= 3.5.8.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-21496