漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Stored Cross-site Scripting (XSS) Vulnerability in the MGate 5121/5122/5123 Series
Vulnerability Description
A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sanitization and encoding of user input in the "Login Message" functionality. An authenticated attacker with administrative access can exploit this vulnerability to inject malicious scripts that are continuously stored on the device. These scripts are executed when other users access the login page, potentially resulting in unauthorized actions or other impacts, depending on the user's privileges.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
MOXA多款产品 跨站脚本漏洞
Vulnerability Description
MOXA MGate 5121等都是中国摩莎（MOXA）公司的一款工业以太网网关。 MOXA多款产品存在跨站脚本漏洞，该漏洞源于对用户输入的清理和编码不足，容易受到存储型跨站脚本攻击。以下产品及版本受到影响：MGate 5121、MGate 5122和MGate 5123 v1.0版本。
CVSS Information
N/A
Vulnerability Type
N/A