Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches.
| Software | From | Fixed in |
|---|---|---|
| erxes / erxes | - | 0.22.3 |
erxes
|
- | 1.0.1.x |