Multiple Stored XSS Vulnerabilities in Xerox Web Application for Phaser Printers

CVE-2019-13167

Summary

Multiple Stored Cross-Site Scripting (XSS) vulnerabilities have been identified in the Xerox Web Application, particularly affecting the Phaser 3320 series. These vulnerabilities can allow attackers to inject malicious scripts into the web application, potentially leading to session hijacking of administrative accounts or execution of unauthorized actions. Attackers leveraging these vulnerabilities may exploit user interactions with the web interface, emphasizing the necessity for immediate security measures.

References