Unknown · Yordam Medaspro · CVE-2023-4676
**Name of the Vulnerable Software and Affected Versions**
Yordam MedasPro versions prior to 28
**Description**
The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject malicious scripts into the website, potentially stealing user data or taking control of user sessions.
**Recommendations**
For versions prior to 28, update to version 28 or later to resolve the issue. As a temporary workaround, consider restricting user input to prevent malicious scripts from being injected into the website. Avoid using user-supplied input in sensitive areas of the web application until the issue is resolved.