CyberRota Analysis
AI-GeneratedThe Library Information and Document Automation Program prior to version 22.2 is vulnerable to cross-site scripting (XSS) due to improper input neutralization during web page generation, allowing attackers to inject malicious scripts targeting HTML attributes. This vulnerability could lead to unauthorized access to sensitive user data or session hijacking. Organizations using this software should prioritize patching to mitigate potential exploitation risks.
Original NVD Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issue affects Library Information and Document Automation Program: before v22.2.