CVE-2024-13598

CVE-2024-13598 is a Reflected Cross-site Scripting (XSS) vulnerability affecting the Internet Starter module of SoftCOM iKSORIS systems. Attackers can exploit a form field creation functionality to inject malicious scripts, which execute in a user's browser if they are tricked into filling the compromised form. This vulnerability has a CVSS score of 6.1 (Medium), indicating it can be exploited over a network with low attack complexity, requiring user interaction, and potentially leading to low impact on confidentiality and integrity. The EPSS score is very low, suggesting a minimal probability of exploitation in the wild. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has received no community discussion or media coverage, further indicating a low profile.