Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')