CVE:CVE-2022-3073
CNNVD:CNNVD-202212-3236
Bootstrap是一款使用HTML、CSS和JavaScript开发的开源Web前端框架。
Bootstrap 2019 v2版本、2021 v1版本、2022 v1版本、2022 SP1 v1版本及之前版本存在跨站脚本漏洞，该漏洞源于Quanos“SCHEMA ST4”示例web模板容易被JavaScript注入。
solution:Upgrade weidmueller 19_iot_md01_lan_h4_s0011_firmware to a higher version than -; Upgrade weidmueller fp_iot_md01_4eu_s2_00000_firmware to a higher version than -; Upgrade weidmueller fp_iot_md01_lan_s2_00000_firmware to a higher version than -; Upgrade weidmueller fp_iot_md01_lan_s2_00011_firmware to a higher version than -; Upgrade weidmueller fp_iot_md02_4eu_s3_00000_firmware to a higher version than -; Upgrade weidmueller iot-gw30_firmware to a higher version than 1.16.0,and avoid the version (,1.16.0]; Upgrade weidmueller iot-gw30-4g-eu_firmware to a higher version than 1.16.0,and avoid the version (,1.16.0]; Upgrade weidmueller uc20-wl2000-ac_firmware to a higher version than 1.16.0,and avoid the version (,1.16.0]; Upgrade weidmueller uc20-wl2000-iot_firmware to a higher version than 1.16.0,and avoid the version (,1.16.0]