Repute info systems ARForms vulnerable to Reflected XSS

CVE-2024-32702

What is CVE-2024-32702?

A critical security vulnerability has been identified in Repute Info Systems' ARForms product, which allows for Cross-Site Scripting (XSS) via improper neutralization of input during web page generation. This vulnerability can lead to malicious actors executing arbitrary scripts in the context of the user's session. The affected versions, ranging from n/a up to 6.4, require immediate attention as they expose users to potential security threats, necessitating robust mitigation policies to safeguard web applications and user data.

References