{"id":"CVE-2024-47227","aliases":["EUVD-2024-42321","GHSA-wj7r-74h6-3r6w"],"status":"published","title":"iRedAdmin before 2.6 allows XSS, e.g., via order_name.","description":"iRedAdmin before 2.6 allows XSS, e.g., via order_name.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00353,"percentile":0.29313,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2024-09-23T00:00:00Z","modified":"2026-10-28T02:31:03Z","products":[{"vendor":"iredmail","product":"iredadmin"}],"references":[{"url":"https://github.com/iredmail/iRedAdmin/commit/b537e71ecf522d7f10180f5f0aab4a98a881893a","tags":["Patch","fix"]},{"url":"https://www.iredmail.org","tags":["Product","web"]},{"url":"https://github.com/iredmail/iRedAdmin/commit/3c72b438d412ea3ee0270f6956e19b1098c19191","tags":["Patch","fix"]},{"url":"https://github.com/iredmail/iRedAdmin/compare/2.5...2.6","tags":["Issue Tracking","Product","web"]},{"url":"https://docs.iredmail.org/upgrade.iredmail.1.6.8-1.7.0.html#upgrade-iredadmin-open-source-edition-to-the-latest-stable-release-26","tags":["Release Notes","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47227","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wj7r-74h6-3r6w"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47227.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-47227","description":"iRedAdmin before 2.6 allows XSS, e.g., via order_name.","status":"published","published":"2024-09-23T00:00:00Z","modified":"2025-03-25T14:11:38.77Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:33:57.638551Z"}],"euvd":[{"id":"EUVD-2024-42321","description":"iRedAdmin before 2.6 allows XSS, e.g., via order_name.","status":"published","published":"2024-09-23T00:00:00Z","modified":"2025-03-25T14:11:38Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:53.630669Z"}],"ghsa":[{"id":"GHSA-wj7r-74h6-3r6w","title":"iRedAdmin before 2.6 allows XSS, e.g., via order_name.","description":"iRedAdmin before 2.6 allows XSS, e.g., via order_name.","status":"published","published":"2024-09-23T06:30:41Z","modified":"2024-09-27T18:33:33Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:58:21.889894Z"}],"nvd":[{"id":"CVE-2024-47227","description":"iRedAdmin before 2.6 allows XSS, e.g., via order_name.","status":"published","published":"2024-09-23T04:15:03.057Z","modified":"2026-06-17T07:56:46.01Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:10:27.456509Z"}],"osv":[{"id":"CVE-2024-47227","description":"iRedAdmin before 2.6 allows XSS, e.g., via order_name.","status":"published","published":"2024-09-23T00:00:00Z","modified":"2026-10-28T02:31:03.672709688Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:43.253252Z"}]}}