← All advisories

Medium severity5.4NVD Advisory· Published Mar 3, 2022· Updated Jun 17, 2026

CVE-2022-25138

CVE-2022-25138

Description

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Name parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Axelor/Open Suite2 versions
cpe:2.3:a:axelor:open_suite:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:axelor:open_suite:*:*:*:*:*:*:*:*range: <=5.0
- (no CPE)
Axelor/Axelorllm-fuzzy
Range: 5.0

Patches

Vulnerability mechanics

References

2

forum.axelor.com/t/vuln-sur-axelor-je-suis-gentil/4768nvdExploitVendor Advisory
github.com/ArianeBlow/Axelor_Stored_XSS/blob/main/README.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.