CVE-2024-41640

The AML Surety Eco software (versions up to 3.5 ) is vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to sanitize user input in the id parameter within a dedicated error page (accessible via https:///Surety3Eco/AppError.aspx). An a...