CVE-2024-7075

Multiple WSO2 products are vulnerable to Reflected Cross-Site Scripting (XSS) via the user search function in the management console. The vulnerability stems from the failure to properly encode user-supplied input before it is rendered in the browser, allowing attackers to inject and execute mali...