6.4Orta
CVE-2020-37022OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting
Açıklama
OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules.
Zayıflık türü (CWE):
CWE-79
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- ExploitDB-48450 exploit
- OpenZ Official Website product
- OpenZ Download Page product
- Vulnerability Lab Advisory third-party-advisory
- VulnCheck Advisory: OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting third-party-advisory