SoftCOM iKSORIS Internet Starter Module Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the Internet Starter module of SoftCOM iKSORIS software, affecting all versions prior to 79.0. This vulnerability allows an attacker to inject a malicious script into a form intended for adding users, which then executes in the context of the user.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where injected scripts are executed in the user's context.

Remediation

This vulnerability has been patched in version 79.0 of the software.