CVE-2025-46545

In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires...

CVE-2025-46545

CVE-2025-46545 affects Sherpa Orchestrator v141851. The issue allows stored cross-site scripting via the name parameter when adding or updating licenses, with the payload executing upon license expiration. Evidence across multiple sources confirms the vulnerability and affected component (license...

CVE-2025-46545

In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires...