CVE-2025-22917

Summary

CVE-2025-22917 is a reflected cross-site scripting (XSS) vulnerability affecting Audemium ERP versions below 0.9.0. This issue permits remote attackers to inject malicious JavaScript code into the 'type' parameter of list.php, which in turn is executed in the web browser of an unsuspecting user. Successful exploitation can lead to unintended actions, such as session hijacking or data theft. Users are advised to update to the latest version of Audemium ERP to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.