CVE-2020-19361

Name of the Vulnerable Software and Affected Versions: Medintux version 2.16.000

Description: The issue is related to Reflected XSS in Medintux, where an attacker can manipulate the mot1 parameter in CCAM.php to perform malicious actions on users who open a maliciously crafted link or third-party web page.

Recommendations: For Medintux version 2.16.000, consider restricting access to the CCAM.php page or disabling the manipulation of the mot1 parameter until a patch is available. As a temporary workaround, avoid using the mot1 parameter in the affected page to minimize the risk of exploitation.