Skip to content
OpenAdvisories
Medium · 4.8 CVE-2024-6920 EUVD-2024-47907GHSA-x6hc-3hv8-fjx3

Stored XSS in NAC Telecommunication's NACPremium

Published Sep 2, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS.

This issue affects NACPremium: through 01082024.

Affected products

VendorProductAffectedFixed
NAC Telecommunication Systems NACPremium ≤ 01082024 —

References