CVE-2018-6906 A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via...
MediumCVSS 6.1
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rainmachine web application | All versions | No fix listed |
References
- www.irongeek.com exploit third-party-advisory