CVE-2025-2130

A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-2130

A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-2130: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

OpenXE code injection vulnerability

OpenXE is a free open source ERP based on Xentral by OpenXE Open Source. A code injection vulnerability exists in OpenXE 1.12 and earlier versions, which stems from the fact that incorrect manipulation of the parameter Notizen can lead to cross-site scripting...

PT-2025-10466

Name of the Vulnerable Software and Affected Versions OpenXE versions up to 1.12 Description A vulnerability was found in OpenXE, affecting unknown code of the component Ticket Bearbeiten Page. The manipulation of the Notizen argument leads to cross-site scripting. The attack can be initiated...