XSS in Dream-Multimedia-Tv Dreambox Dm500-S

CVE-2015-4714

Cross-site scripting (XSS) vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.010 (60.1th percentile) — read the EPSS interpretation.