XSS in B&r Industrial Automation Gmbh Aprol
CVE-2024-10208
An Improper Neutralization of Input During Web Page Generation vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated network-based attacker to insert malicious code which is then executed in the context of the user’s browser session.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (30.2th percentile) — read the EPSS interpretation.
Affected products
- B&r Industrial Automation Gmbh Aprol — versions 4.4