medium5.4
CVE-2025-22917
A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbitrary JavaScript payload in the web brow…
Impact
A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbitrary JavaScript payload in the web browser of a user by including a malicious payload into the 'type' parameter of list.php.
Affected products
| Product | Affected versions |
|---|---|
| Audemium ERP | through 0.9.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.