Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-32mp-3hhq-7ffx

Опубликовано: 10 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 2.4

Описание

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 17%
0.00258
Низкий

1.9 Low

CVSS4

2.4 Low

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 2.4
nvd
3 месяца назад

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 17%
0.00258
Низкий

1.9 Low

CVSS4

2.4 Low

CVSS3

Дефекты

CWE-79