CVE-2024-49210: Archerirm Archer

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and executed by the web browser in the context of the vulnerable web application.

Affected products

• Archerirm Archer: from 6.3.0.0, before 2024.09 (fixed in 2024.09)

Published 2024-10-22. Last modified 2026-06-17.