GHSA-hfqr-g88q-6m8gMediumCVSS 6.6

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web...

Published
October 20, 2026
Last Modified
October 20, 2026

🔗 CVE IDs covered (1)

📋 Description

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.

To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.

🔗 References (3)