CVE-2023-30639: Archerirm Archer

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 (6.11.0.4) is also a fixed release.

Affected products

• Archerirm Archer: from 6.8.0.0, up to and including 6.11.0.4; from 6.12.0.0, before 6.12.0.6.1 (fixed in 6.12.0.6.1)

Published 2023-05-01. Last modified 2026-06-17.