CVE-2024-5540

The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a

malicious actor to compromise the client browser

.