Isin Basi Workif Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Isin Basi Advertisement Information Technologies Trade Inc.'s Workif product, affecting versions through 20251003. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

The vulnerability has not yet been addressed by the vendor. The National Cyber Incident Response Center (USOM) recommends using an alternative software.