Cross Site Scripting Vulnerability in VMware vRealize Log Insight
CVE-2020-3953
4.8MEDIUM
What is CVE-2020-3953?
A Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight versions prior to 8.1.0 due to improper input validation. This flaw could allow an attacker to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data exposure.
Affected Version(s)
VMware vRealize Log Insight VMware vRealize Log Insight prior to 8.1.0