VULNERABILITY INTELLIGENCE

CVE-2024-5540

CVSS score6.9 MEDIUM

EPSS probability0.34%

CISA KEVNot currently listed

Published2025-11-27

Last modified2026-10-27

Description

The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise the client browser .