MyNET Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in MyNET versions through 26.05. This issue allows unauthenticated users to inject malicious scripts via the 'src' parameter, exploiting inadequate input validation and output encoding.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a request to the application with a payload in the 'src' parameter that includes JavaScript code. The injected script will be executed when the link is clicked, demonstrating the cross-site scripting vulnerability.

Remediation

Users are advised to update to MyNET version 26.06 or later, where this vulnerability has been fixed.