CVE-2024-27593: Eramba

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0.

Affected products

• Eramba Eramba: from 3.22.3, before 3.23.0 (fixed in 3.23.0)

Published 2024-05-15. Last modified 2026-06-17.