PideTuCita Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in PideTuCita versions prior to 6.0.52. This vulnerability allows attackers to execute JavaScript in the context of the victim's browser by sending a malicious URL that exploits the 'cookies/indes.php/<XSS>' endpoint. The exploitation of this vulnerability could lead to the theft of sensitive user information, such as session cookies, or allow attackers to perform actions on behalf of the user.

Impact

Exploitation of this vulnerability could result in reflected cross-site scripting, allowing for the execution of malicious scripts in the user's browser session.

Remediation

Users can upgrade to PideTuCita version 6.0.52 or later to address this vulnerability.