← All advisories

Medium severity6.1NVD Advisory· Published Sep 23, 2024· Updated Jun 17, 2026

CVE-2024-47227

CVE-2024-47227

Description

iRedAdmin before 2.6 allows XSS, e.g., via order_name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

iRedAdmin/iRedAdminllm-fuzzy2 versions
<2.6+ 1 more
- (no CPE)range: <2.6
- (no CPE)
iRedMail/iRedAdminllm-create2 versions
<2.6+ 1 more
- (no CPE)range: <2.6
- cpe:2.3:a:iredmail:iredadmin:*:*:*:*:open_source:*:*:*range: <2.6

Patches

Vulnerability mechanics

References

5

github.com/iredmail/iRedAdmin/commit/3c72b438d412ea3ee0270f6956e19b1098c19191nvdPatch
github.com/iredmail/iRedAdmin/commit/b537e71ecf522d7f10180f5f0aab4a98a881893anvdPatch
docs.iredmail.org/upgrade.iredmail.1.6.8-1.7.0.htmlnvdRelease NotesVendor Advisory
github.com/iredmail/iRedAdmin/compare/2.5...2.6nvdIssue TrackingProduct
www.iredmail.orgnvdProduct

News mentions

0

No linked articles in our index yet.