Skip to content
OpenAdvisories
Medium · 6.9 CVE-2024-5540 EUVD-2024-55102GHSA-7mwr-c268-44gh

ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting

Published Nov 27, 2025 · Updated Nov 28, 2025 · Assigned by Carrier

Vendor: Automated Logic Vendor: Carrier Product: i-Vu Product: WebCTRL

Description

The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a

malicious actor to compromise the client browser

.

Affected products

VendorProductAffectedFixed
Automated Logic WebCTRL < 8.0 8.0
Carrier i-Vu < 8.0 8.0

References