CVE-2024-47227

iRedAdmin before 2.6 allows XSS, e.g., via ordername...

CVE-2024-47227

CVE-2024-47227 affects iRedAdmin prior to 2.6, where an XSS flaw is exploitable via the order_name parameter. The vulnerability arises from how user-supplied input in this field is handled, enabling the attacker to inject and execute scripts in the context of the affected web application. Impact ...