CVE-2024-5540: Automated Logic Webctrl

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise the client browser .

Affected products

• Automated Logic Webctrl: before 8.0 (fixed in 8.0)
• Carrier I-Vu: before 8.0 (fixed in 8.0)

Published 2025-11-27. Last modified 2026-06-17.