CVE-2024-41640

—

CVSS 3.1

6.1 medium

EPSS

<1%p48

Published

Jul 29, 2024 (Jul 29, 2024)

Modified

Jun 17, 2026

Description

Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter.

Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.