CVE Database
/

CVE-2024-5540

Back to search

CVE-2024-5540

Published: Nov 27, 2025

Modified: Nov 28, 2025

PUBLISHED

Description

The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise the client browser .

VendorProductVersions

Automated Logic

WebCTRL

affected
0 - < 8.0

Carrier

i-Vu

affected
0 - < 8.0

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now