CVE-2024-47227

CVE-2024-47227 affects iRedAdmin prior to 2.6, where an XSS flaw is exploitable via the order_name parameter. The vulnerability arises from how user-supplied input in this field is handled, enabling the attacker to inject and execute scripts in the context of the affected web application. Impact ...