CVE-2011-4836
Homeseer Hs2 - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Silent Dream · textremotehardware
https://www.exploit-db.com/exploits/36429
Scores
EPSS
0.0132
EPSS Percentile
79.7%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
homeseer/homeseer_hs2
n/a/n/a
Timeline
Published
Dec 15, 2011
Tracked Since
Feb 18, 2026