Security Advisory

CVE-2025-22917

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-28 00:00:00
Last updated 2025-01-29 16:03:43
Assigner mitre
State PUBLISHED

Description

A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbitrary JavaScript payload in the web browser of a user by including a malicious payload into the type parameter of list.php.