Black Rainbow · Black Rainbow Nimbus · CVE-2022-24967
**Name of the Vulnerable Software and Affected Versions**
Black Rainbow NIMBUS versions prior to 3.7.0
**Description**
The issue allows for stored Cross-site Scripting (XSS), which is a type of attack where an attacker injects malicious code into a website, and this code is stored on the server. When other users access the website, the malicious code is executed, potentially leading to unauthorized actions.
**Recommendations**
For versions prior to 3.7.0, update to version 3.7.0 or later to resolve the issue.