← CVE Intelligence

CVE-2024-10208

Cross Site Scripting vulnerability in APROL Web Portal PUBLISHED

Description (CNA)

An Improper Neutralization of Input During Web Page Generation vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated network-based attacker to insert malicious code which is then executed in the context of the user’s browser session.

Affected (CNA)

Vendor / productVersions
B&R Industrial Automation GmbH / APROLaffected 4.4 before 4.4-00P5

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.