A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
https://www.zerodayinitiative.com/advisories/ZDI-24-051/
https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US