CVE-2024-47227

iRedAdmin before 2.6 allows XSS, e.g., via ordername...

iRedAdmin 安全漏洞

iRedAdmin is a free open source mail server solution from iRedAdmin Open Source. A security vulnerability exists in iRedAdmin prior to version 2.6 that stems from the ordername parameter containing a cross-site scripting vulnerability...

CVE-2024-47227: Improper Neutralization of Input During Web Page Generation

iRedAdmin before 2.6 allows XSS, e.g., via ordername...

CVE-2024-47227

iRedAdmin before 2.6 allows XSS, e.g., via ordername...

CVE-2024-47227

CVE-2024-47227 affects iRedAdmin prior to 2.6, where an XSS flaw is exploitable via the order_name parameter. The vulnerability arises from how user-supplied input in this field is handled, enabling the attacker to inject and execute scripts in the context of the affected web application. Impact ...