CVE-2024-36819

MAP-OS versions 4.45.0 and earlier are vulnerable to a Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. A malicious user can insert a payload into the Client Name input field. When a service order is created for that client, the payload executes ...