Eastnets PaymentSafe Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in Eastnets PaymentSafe version 2.5.26.0. The issue arises in the Edit Manual Reply Handler component, specifically within the /directRouter.rfc file. The vulnerability is triggered by manipulating the Title argument, allowing for basic cross-site scripting. This issue can be exploited remotely and has been disclosed publicly.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can upgrade to Eastnets PaymentSafe version 2.5.27.0 to address this vulnerability.