iteaj iboot IoT Gateway Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in iteaj iboot IoT Gateway version 1.1.3. This issue arises in the file upload component, specifically within the common/upload directory. The vulnerability allows for the manipulation of the File argument, enabling remote attackers to inject malicious scripts.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.