Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-36905 1 Fibaro 4 Home Center 2, Home Center 3, Home Center 5 and 1 more 2026-01-08 7.5 High
FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.