CVE-2020-15017_Nedi XSS

[Description]
NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. An attacker can exploit this
vulnerability by crafting arbitrary JavaScript in the sta GET parameter.

------------------------------------------

[Additional Information]
Step To Reproduce-:

1. Login with the credential.
2. Go to https://ip-nedi/Devices-Config.php?sta="><script>alert(document.domain)</script>

------------------------------------------

[Vulnerability Type]
Cross Site Scripting (XSS)

------------------------------------------

[Vendor of Product]
Nedi-FindIt

------------------------------------------

[Affected Product Code Base]
Nedi - 1.9C

------------------------------------------

[Affected Component]
Devices-Config.php

------------------------------------------

[Attack Type]
Remote

------------------------------------------

[Impact Code execution]
true

------------------------------------------

[Attack Vectors]
An attacker can exploit this vulnerability by crafting arbitrary
javascript ("><script>alert(document.domain)</script>) in `sta` GET
parameter of Devices-Config.php resulting in execution of the
javascript. Due to this flaw, an attacker can hijack the user's
session.

------------------------------------------

[Reference]
http://www.nedi.ch/download/

------------------------------------------

[Discoverer]
Preetham Bomma