CVE-2023-34855 Information

Description

A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co. Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi.

Reference

https://github.com/hashshfza/Vulnerability/issues/1