CVE-2024-27708

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.

The risk for the organization is the possibility of executing malicious code in the context of the application, which can lead to data security breaches or session hijacking.

It is recommended to update MyNET to the latest version that fixes this vulnerability and to validate and sanitize the src parameter to prevent iframe injection.