Medium severity6.1NVD Advisory· Published Nov 1, 2018· Updated Jun 17, 2026
CVE-2018-6906
CVE-2018-6906
Description
A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1- www.irongeek.com/i.phpnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.