Description
This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerable parameter to perform reflected Cross Site Scripting (XSS) attacks on the targeted system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Meddiff Technologies | InstaRISPACS | 3.0.0, <=4.0.0 Build 29, <=5.0.0 Build 19 | — |
References
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0241 third-party-advisory