CVE-2018-7810

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on.

• CWE-79

• https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/Vendor Advisory
• https://www.tenable.com/security/research/tra-2018-38Exploit, Third Party Advisory
• https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/Vendor Advisory
• https://www.tenable.com/security/research/tra-2018-38Exploit, Third Party Advisory

Published

Nov 30, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7802A SQL Injection vulnerability exists in EVLink Parking, v3.2…
• CVE-2018-7803A CWE-754 Improper Check for Unusual or Exceptional Conditio…
• CVE-2018-7804A URL Redirection to Untrusted Site vulnerability exists in …
• CVE-2018-7806Data Center Operation allows for the upload of a zip file fr…
• CVE-2018-7807Data Center Expert, versions 7.5.0 and earlier, allows for t…
• CVE-2018-7809An Unverified Password Change vulnerability exists in the em…
• CVE-2018-7811An Unverified Password Change vulnerability exists in the em…
• CVE-2018-7812An Information Exposure through Discrepancy vulnerability ex…
• CVE-2018-7813A Type Confusion (CWE-843) vulnerability exists in Eurotherm…
• CVE-2018-7814A Stack-based Buffer Overflow (CWE-121) vulnerability exists…
• CVE-2018-7815A Type Confusion (CWE-843) vulnerability exists in Eurotherm…
• CVE-2018-7816A Permissions, Privileges, and Access Control vulnerability …