CVE-2024-41640

CVE-2024-41640 documents confirm a Cross Site Scripting (XSS) vulnerability in AML Surety Eco, affected up to version 3.5. The vulnerability arises from the use of the id parameter in a crafted GET request, enabling an attacker to run arbitrary code. The connected sources consistently describe XS...