XSS in HP Envy 100 D410

CVE-2011-1533

Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.021 (79.5th percentile) — read the EPSS interpretation.

Affected products

Hp Envy_100_d410
Hp Photosmart_b110
Hp Photosmart_d110
Hp Photosmart_plus_b210
Hp Photosmart_premium_c310
Hp Photosmart_premium_c510
Hp Photosmart_premium_fax_all-in-one
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

hp-security-alert@hp.com (x_refsource_SREASON, third-party-advisory)
hp-security-alert@hp.com (vdb-entry, x_refsource_VUPEN)
hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
hp-security-alert@hp.com (vdb-entry, x_refsource_BID)