CVE-2020-37022OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting

Beschreibung

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• ExploitDB-48450 exploit
• OpenZ Official Website product
• OpenZ Download Page product
• Vulnerability Lab Advisory third-party-advisory
• VulnCheck Advisory: OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting third-party-advisory