CyberRota Analysis
AI-GeneratedThe IRIS web application, specifically version 2.4.26 and potentially earlier versions, is susceptible to stored cross-site scripting (XSS) vulnerabilities in its custom attributes function. This flaw allows attackers to inject malicious scripts that can be executed in the context of users accessing the application, potentially leading to data theft or session hijacking. Organizations using this version of the IRIS web application should prioritize patching this vulnerability to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the custom attributes function.