CVE-2024-51026

The NetAdmin IAM system (version 4.0.30319 ) is susceptible to a Cross-Site Scripting (XSS) vulnerability within the /BalloonSave.ashx endpoint. An authenticated user can inject a malicious payload into the Content= field, which executes whenever an affected page is refreshed. The security impact...

CVE-2024-51026

The NetAdmin IAM system version 4.0.30319 has a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload into the Content= field...