A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ac_centralized_management_platform_project | ac_centralized_management_platform | 1.02.040 |