Security Advisory

CVE-2025-22917

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-28 00:00:00
Last updated 2025-01-29 16:03:43
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbitrary JavaScript payload in the web browser of a user by including a malicious payload into the 'type' parameter of list.php.