Unrated severityNVD Advisory· Published Jan 26, 2015· Updated May 6, 2026
CVE-2015-1179
CVE-2015-1179
Description
Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dpid, (2) dpxid, or (3) pid parameter.
Affected products
1- cpe:2.3:a:infinite_automation_systems:mango_automation:*:*:*:*:*:*:*:*Range: <=2.4.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.