CyberRota Analysis
AI-GeneratedThe IRIS web application, specifically version 2.4.26 and potentially earlier versions, is susceptible to stored cross-site scripting (XSS) via the assets function, allowing attackers to inject malicious scripts that can execute in users' browsers. This vulnerability poses a significant risk as it can lead to unauthorized access to sensitive user data and session hijacking. Organizations utilizing this application should prioritize remediation to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets function.