A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0.
[
{
"cpes": [
"cpe:2.3:a:eramba:eramba:3.2.3.0:*:*:*:*:*:*:*"
],
"vendor": "eramba",
"product": "eramba",
"versions": [
{
"status": "affected",
"version": "3.22.3",
"lessThan": "3.23.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]