CyberRota Analysis
AI-GeneratedThe IRIS web application, specifically version 2.4.26 and potentially earlier versions, is susceptible to stored cross-site scripting (XSS) vulnerabilities in its datastore upload function, allowing attackers to inject malicious scripts that can be executed in users' browsers. This could lead to unauthorized access to sensitive information or user sessions. Organizations using this application should prioritize remediation to protect against potential exploitation and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the datastore upload function.