CVE-2016-3150: Barco Clickshare Csc-1 Firmware

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Barco Clickshare Csc-1 Firmware: up to and including 01.09.05.02
• Barco Clickshare Cse-200 Firmware: up to and including 01.09.02.05

Published 2017-01-12. Last modified 2026-06-17.