Description
Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.
Affected products
explorance: blue
References2
- gist.github.com/SaraAlsaif/f363b307f29c865d499678eca3106b43 ExploitMitigationThird Party Advisory
- www.explorance.com/products/blue Product
Metrics
- CVSS 3.1
-
6.1
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N - EPSS — exploit probability
- 0% percentile: 26 · as of 8 November 2026
- CWE
- CWE-79
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.