XSS in Automated Logic Webctrl
CVE-2024-5540
The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise the client browser .
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.
Affected products
- Automated Logic Webctrl — versions 0
- Carrier I-vu — versions 0