Automated Logic’s WebCTRL Premium Server has been confirmed vulnerable to an open redirect and a cross‑site scripting (XSS) flaw — tracked as CVE‑2024‑8527 and CVE‑2024‑8528 — that together can be abused to phish operators, deliver malicious scripts into administrator browsers, and form...