CVE-2024-40317

Medium · 6.1

CVSS

6.1

EPSS

0.3%

Published

Dec 24, 2025

CISA due date

—

The record

A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP.

Affected packages

Ecosystem	Package	Introduced	Fixed