CVE-2024-41514

A reflected cross-site scripting (XSS) vulnerability exists in CADClick version 1.11.0 and before . The flaw is located in the "PrevPgGroup.aspx" page, where remote attackers can inject arbitrary web script or HTML via the "wer" parameter. This allows for the injection of malicious code. As a tem...