Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string.
CVSS 3.1CRITICAL 9.4·Network·No auth·No interaction·EPSS 0.00406·Published 2023-09-27·Fixed in v8.9.8CWE-79