Unknown · Veribase Order · CVE-2024-7873
**Name of the Vulnerable Software and Affected Versions**
Veribase Order versions prior to 4.010.3
**Description**
The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), which allows Stored XSS, Cross-Site Scripting, exploitation of Script-Based APIs, and XSS Through HTTP Headers. This is due to improper encoding or escaping of output and improper neutralization of script in attributes in a web page.
**Recommendations**
For versions prior to 4.010.3, update to version 4.010.3 or later to resolve the issue. As a temporary workaround, consider restricting access to script-based APIs and HTTP headers to minimize the risk of exploitation. Additionally, ensure proper input validation and output encoding to prevent cross-site scripting attacks.