CVE-2024-24130

Name of the Vulnerable Software and Affected Versions Mail2World version 12

Description A reflected cross-site scripting (XSS) issue was discovered in the Mail2World v12 Business Control Center. The issue is related to the Usr parameter at the "resellercenter/login.asp" endpoint. This allows for potential XSS attacks.

Recommendations For Mail2World version 12, consider restricting access to the "resellercenter/login.asp" endpoint until a patch is available. As a temporary workaround, avoid using the Usr parameter in this endpoint to minimize the risk of exploitation.