GmbH Mecury Managed Print Services Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) version 11.11c. This vulnerability allows attackers to execute arbitrary JavaScript in the context of a user's browser by injecting a crafted payload into an unfiltered variable.

Impact

Exploitation of this vulnerability allows for the injection and execution of malicious scripts in the affected user's browser, potentially leading to the theft of session identifiers or personal information, unauthorized account takeover, or unintended actions performed on behalf of the victim.