Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6jrw-wp7c-r8q8

Опубликовано: 30 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 6.4

Описание

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules.

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules.

EPSS

Процентиль: 11%
0.00036
Низкий

5.1 Medium

CVSS4

6.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.4
nvd
9 дней назад

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules.

EPSS

Процентиль: 11%
0.00036
Низкий

5.1 Medium

CVSS4

6.4 Medium

CVSS3

Дефекты

CWE-79