XSS in Lcds - Leão Consultoria E Desenvolvimento De Sistemas Ltda Me Laquis Scada

CVE-2024-9414

In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users, or perform unauthorized actions.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.007 (47.5th percentile) — read the EPSS interpretation.