5 matches found
CVE-2025-2130
A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
CVE-2025-2130
A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
OpenXE 代码注入漏洞
OpenXE is a free open source ERP based on Xentral by OpenXE Open Source. A code injection vulnerability exists in OpenXE 1.12 and earlier versions, which stems from the fact that incorrect manipulation of the parameter Notizen can lead to cross-site scripting...
CVE-2025-2130: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
PT-2025-10466
Name of the Vulnerable Software and Affected Versions OpenXE versions up to 1.12 Description A vulnerability was found in OpenXE, affecting unknown code of the component Ticket Bearbeiten Page. The manipulation of the Notizen argument leads to cross-site scripting. The attack can be initiated...