What is GHSA-9wg4-hwfp-qf2w?

GHSA-9wg4-hwfp-qf2w is a security advisory published by GitHub Security Advisories with Medium severity. A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on...

Which CVE IDs does GHSA-9wg4-hwfp-qf2w cover?

GHSA-9wg4-hwfp-qf2w covers the following CVE IDs: CVE-2020-26801. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9wg4-hwfp-qf2w?

GHSA-9wg4-hwfp-qf2w has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-9wg4-hwfp-qf2wMediumCVSS 5.4

A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-26801 →

📋 Description

A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 12.04.0055. This vulnerability allows authenticated attackers to obtain other users' information via a crafted POST request.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-26801
http://su2200rtxl2ua.com
http://tripplite.com
https://www.blacklanternsecurity.com/2021-06-21-Tripplite-CVE
https://github.com/advisories/GHSA-9wg4-hwfp-qf2w