CVE-2020-28930: Epson Eps Tse Server 8 Firmware

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.

Affected products

• Epson Eps Tse Server 8 Firmware: version 21.0.11 only

Published 2020-12-16. Last modified 2026-06-17.