PT-2025-1472 · Selesta · Selesta Visual Access Manager

Name of the Vulnerable Software and Affected Versions: Selesta Visual Access Manager versions prior to 4.42.2 Description: The issue is related to Cross Site Scripting XSS that can be exploited via the "/vam/vam ep.php" API endpoint. This allows for malicious scripts to be injected into the...