CVE-2020-12256

5.4 mediumEPSS 96%

Medium (5.4) in rconfig rconfig. EPSS 96% chance of exploitation in the next 30 days.

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 96% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-05-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rconfig:rconfig

References

https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8
https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8

Check your stack JSON