CVE-2019-20521

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...

CVE-2019-20520

CVE-2019-20520 affects ERPNext 11.1.47 and is a reflected XSS vulnerability that can be triggered via the PATH_INFO to the api/method/ URI. Multiple connected feeds corroborate the same description. CVSS metrics: CVSSv3.1 base score 6.1 (NETWORK, LOW attack complexity, NONE privileges, UI REQUIRE...

CVE-2019-20520

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...

CVE-2019-20519

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the user/ URI, as demonstrated by a crafted e-mail address...

CVE-2019-20519

Affected software: ERPNext 11.1.47. Vulnerability: reflected XSS via PATH_INFO to the user/ URI, demonstrated by a crafted e-mail address. Root cause (as stated): improper handling of PATH_INFO leading to script execution on the client side. Impact: client-side code execution risk; severity metri...

CVE-2019-20518

CVE-2019-20518 affects ERPNext 11.1.47 and is described as a reflected XSS vulnerability triggered via PATH_INFO to the project/ URI. Connected sources (RH, NVD, CNVD, osv, CNVD, CVE lists) consistently report the same vector, with no evidence of exploitation details in the provided documents. Th...

CVE-2019-20518

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the project/ URI...

CVE-2019-20517

CVE-2019-20517 affects ERPNext 11.1.47 and is a reflected XSS vulnerability reachable via PATH_INFO to the /contact/ URI. The root cause noted in CNVD-2020-19000 is lack of proper validation of client-side data by the web application, allowing an attacker to execute client-side code. Public refer...

CVE-2019-20517

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the contact/ URI...

CVE-2019-20516

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...

CVE-2019-20516

ERPNext 11.1.47 is affected by a reflected XSS vulnerability via PATH_INFO to the blog/ URI. The connected records confirm the vulnerable condition but do not provide exploitation details, broader affected versions, or a vendor patch/remediation in the supplied documents.

CVE-2019-20515

ERPNext 11.1.47 is affected by a reflected XSS via the PATH_INFO to the addresses/ URI. The vulnerability is documented across multiple connected sources (e.g., NVD, Red Hat advisory, CNVD, OSV, CVE lists) with consistent description. Root cause details beyond “reflected XSS via PATH_INFO” are no...

CVE-2019-20515

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...

CVE-2019-20514

CVE-2019-20514 affects ERPNext 11.1.47 with a reflected XSS vulnerability via PATH_INFO to the /address/ URI. The root cause is inadequate validation of PATH_INFO, enabling injection of client-side script. Reported impact ranges across sources (CVSS data vary: up to high severity in some vectors)...

ERPNext Injection Vulnerability

ERPNext is an open source enterprise resource planning solution from ERPNext India. An injection vulnerability exists in ERPNext version 11.1.47, which arises from a lack of proper validation of user input data by a networked system or product during the course of a user's operation to enter...

CVE-2019-20511

ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...

CVE-2019-20511

ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...

Design/Logic Flaw

ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...

CVE-2019-20511

CVE-2019-20511 affects ERPNext 11.1.47 and is described as a Frame Injection vulnerability via the blog?blog_category parameter. Red Hat/CNVD-style entries corroborate an injection issue stemming from insufficient input validation on user-supplied data; ERPNext’s styling of a blog category parame...

CVE-2019-20511

ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...