Pixsoft Vivaz Cross-Site Scripting Vulnerability in Login Endpoint

A cross-site scripting (XSS) vulnerability has been identified in Pixsoft Vivaz version 6.0.11. The issue arises in an unknown function of the Login Endpoint, specifically within the file '/servlet?act=login&submit=1&evento=0&pixrnd=0125021817031859360231'. The vulnerability is triggered by manipulating the 'sistema' argument, allowing remote attackers to execute the script.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.