CVE-2024-5139

Multiple WSO2 products are vulnerable to a Cross-Site Scripting (XSS) flaw in the Authentication Endpoint . The root cause is the acceptance of user-supplied input without sufficient encoding, which allows for the injection of malicious JavaScript payloads . Successful exploitation enables an att...