Modicon Quantum HTTP Server 'formTest' 'name' Parameter XSS
Medium Nessus Plugin ID 119147
Synopsis
The remote web server hosts a script that is affected by a cross- site scripting vulnerability.
Description
The remote web server appears to be a Modicon Quantum controller vulnerable to a reflected cross-site scripting attack. An attacker can leverage this issue to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected device.
Solution
Apply access controls to prevent the exploitation of this device.