WSO2 WSO2 Carbon Identity User Store Configuration UI

• CVE-2024-4412 Low 2.7 Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations 0.4%
• CVE-2025-13394 Medium 5.4 Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions 0.1%
• CVE-2024-8008 Medium 5.2 Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation 0.6%