Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-12972 EUVD-2024-54943GHSA-mwf5-j2jc-7f3h

XSS in Akinsoft's OctoCloud

Published Sep 2, 2025 · Updated Jun 1, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS).

This issue affects OctoCloud: from s1.09.01 before v1.11.01.

Affected products

VendorProductAffectedFixed
Akinsoft OctoCloud s1.09.01 – < v1.11.01 v1.11.01

References