CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. Exploitation may require the attacker to be authenticated.
CVE
CVE-2026-24323
Severity
MEDIUM
CVSS
6.1
EPSS
0.21%
Original NVD Description
The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.
Related CVEs
Other vulnerabilities affecting the same vendor(s)