CVE-2023-40461 — Cross-site scripting vulnerability in ACEManager
The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileges to access a file upload field which does not fully …
Published: 2023-12-04 · CVSS: 8.1 · CVSS 3.1
The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileges to access a file upload field which does not fully validate the file name, creating a Stored Cross-Site Scripting condition.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7