Threats tagged 'ghsa-xxf7-hwxj-cv76'

A reflected cross-site scripting (XSS) vulnerability exists in the login/SSO error page of INFINITT ULite versions 5.0.2.1_BN48_20260528 and earlier. This flaw allows unauthenticated remote attackers to execute arbitrary JavaScript in the browser of victims who open a specially crafted link. The vulnerability arises from an unsanitized request parameter that is reflected without proper output encoding. The issue is fixed in version 5.0.2.1_BN50.