VULNERABILITY INTELLIGENCE

CVE-2024-27593

CVSS score5.4 MEDIUM

EPSS probability0.28%

CISA KEVNot currently listed

Published2024-05-15

Last modified2026-06-17

Description

A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0.