Description
Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Automated Logic | WebCtrl | 6.0 – ≤ 9.0 | — |
| Carrier | i-Vu | 6.0 – ≤ 9.0 | — |
Advisories 1
- ICSA-25-324-01 Automated Logic WebCTRL Premium Server CISA ICS & IT advisories · Nov 20, 2025