SoftCOM iKSORIS Internet Starter Module Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the Internet Starter module of SoftCOM iKSORIS system, affecting all versions prior to 79.0. This vulnerability allows an attacker to inject a malicious script that is executed in the context of the user's session. The issue arises when a user is tricked into filling out a form on the login panel with a script, which then runs as if it were part of the user's own actions.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where injected scripts are executed in the user's context, potentially leading to unauthorized actions or data exposure.

Remediation

Users can upgrade to SoftCOM iKSORIS version 79.0 or later to address this vulnerability.