Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-27593 EUVD-2024-24788GHSA-57h3-6mh3-cjrr

A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated at…

Published May 15, 2024 · Updated Feb 13, 2025 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0.

References