The Epson AirPrint web configuration page is vulnerable to a reflected cross-site scripting (XSS) issue in the INPUTT_GEOLOCATION parameter in the web administration console.

The Epson AirPrint web configuration page is vulnerable to a reflected cross-site scripting (XSS) issue in the INPUTT_GEOLOCATION parameter in the web administration console.

via R7-2017-28: Epson AirPrint XSS (CVE-2018-5550)

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.