CVE-2024-6050

Name of the Vulnerable Software and Affected Versions: SOWA OPAC versions 4.0 through 4.9.10 SOWA OPAC versions 5.0 through 6.2.12

Description: The issue allows for Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. An attacker could trick a user into using a crafted URL, causing a script to run in the user's browser.

Recommendations: For SOWA OPAC versions 4.0 through 4.9.10, update to version 4.9.10 or later. For SOWA OPAC versions 5.0 through 6.2.12, update to version 6.2.12 or later.