CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 10.5% probability of exploitation in the next 30 days.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization.
Related CVEs
Other vulnerabilities affecting the same vendor(s)