XSS in Automated Logic Webctrl

CVE-2024-8528

Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.001 (1.9th percentile) — read the EPSS interpretation.