medium6.1
CVE-2024-41640
Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter.
Impact
Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter.
Affected products
| Product | Affected versions |
|---|---|
| AML Surety Eco | before 3.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.