Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/09/21 1:43 p.m.35 views

CVE-2026-94387 Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

5.4CVSS0.00182EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/21 1:43 p.m.2 views

CVE-2026-94387 Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

5.1CVSS5.7AI score
SaveExploits0References10
Rows per page
Query Builder