Lucene search
K

8 matches found

NVD
NVD
added 2026/01/30 5:16 p.m.4 views

CVE-2020-37022

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules...

6.4CVSS0.00059EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/01/30 4:16 p.m.3 views

CVE-2020-37022 OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules...

6.4CVSS5.8AI score0.00059EPSS
Exploits0References5
EUVD
EUVD
added 2026/01/30 4:16 p.m.3 views

EUVD-2020-30958

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules...

6.4CVSS5.8AI score0.00059EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/30 4:16 p.m.4 views

CVE-2020-37022

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules...

6.4CVSS5.8AI score0.00059EPSS
Exploits0References5
CVE
CVE
added 2026/01/30 4:16 p.m.8 views

CVE-2020-37022

CVE-2020-37022 refers to OpenZ ERP 3.6.60 with a persistent cross-site scripting vulnerability in the Employee module’s name and description fields. Attacks can inject scripts via POST flows that target these parameters, enabling session hijacking and manipulation of application modules. The conn...

6.4CVSS5.8AI score0.00059EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/01/30 4:16 p.m.27 views

CVE-2020-37022 OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules...

6.4CVSS0.00059EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/30 12:0 a.m.4 views

PT-2026-5417

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules...

6.4CVSS5.8AI score0.00059EPSS
Exploits0References6
Packet Storm
Packet Storm
added 2020/05/07 12:0 a.m.133 views

OpenZ ERP 3.6.60 Cross Site Scripting

Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2234 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ====================================...

Exploits0
Rows per page
Query Builder