CVE-2024-49708

CVE-2024-49708 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Internet Starter module of SoftCOM iKSORIS systems. An attacker could exploit this by injecting malicious scripts into a delivery address form, which would then execute in a user's browser context. This vulnerability has a CVSS score of 5.4 (Medium), indicating a low-privileged attacker could exploit it with low complexity, potentially leading to limited impact on confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.