Design/Logic Flaw

2020-03-1918:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

37.5%

ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the user/ URI, as demonstrated by a crafted e-mail address.

CPENameOperatorVersion
erpnexteq11.1.47

CPE	Name	Operator	Version
	erpnext	eq	11.1.47

References

www.netsparker.com/web-applications-advisories/ns-19-017-cross-site-scripting-in-erpnext/

0.001 Low

EPSS

Percentile

37.5%

Related for PRION:CVE-2019-20519