PoC Index

CVE-2024-41640

MEDIUM 6.1EPSS 0.6%

Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter.

CVSS v3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.62% chance of exploitation in the next 30 days, 48th percentile
Published
2024-07-29
Updated
2024-08-02

Proof-of-concept exploits (1)

References

Related