2025-01-28 00:00:00
mitre
PUBLISHED
A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbitrary JavaScript payload in the web browser of a user by including a malicious payload into the type parameter of list.php.