Lucene search
K

4436 matches found

Cvelist
Cvelist
added 2026/05/10 2:15 a.m.38 views

CVE-2026-8221 Devs Palace ERP Online item-save cross site scripting

A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/item-save. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacte...

4.8CVSS0.00202EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/10 2:15 a.m.4 views

CVE-2026-8221

A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/item-save. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacte...

4.8CVSS4.2AI score0.00202EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/05/10 2:15 a.m.14 views

CVE-2026-8221

Dev s Palace ERP Online (versions up to 4.0.0) is affected by a cross-site scripting flaw in the /inventory/item-save function. The issue stems from a manipulation that enables XSS, with remote exploitation possible and an exploit published. The records indicate the vendor was contacted but did n...

4.8CVSS4.2AI score0.00202EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/10 2:0 a.m.7 views

CVE-2026-8220 Devs Palace ERP Online customer-save cross site scripting

A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted ear...

4.8CVSS4.2AI score0.00202EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/10 2:0 a.m.37 views

CVE-2026-8220 Devs Palace ERP Online customer-save cross site scripting

A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted ear...

4.8CVSS0.00202EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/10 2:0 a.m.9 views

CVE-2026-8220

A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted ear...

4.8CVSS4.2AI score0.00202EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/05/10 2:0 a.m.14 views

CVE-2026-8220

CVE-2026-8220 affects Devs Palace ERP Online up to version 4.0.0. A vulnerability in an unknown function of the file /inventory/customer-save enables cross-site scripting. The issue permits remote execution, with exploit publicly available per the description. Documents do not specify affected ve...

4.8CVSS4.2AI score0.00202EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/10 1:45 a.m.39 views

CVE-2026-8219 Devs Palace ERP Online supplier-save cross site scripting

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS0.00258EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/10 1:45 a.m.7 views

CVE-2026-8219 Devs Palace ERP Online supplier-save cross site scripting

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS4.2AI score0.00258EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/10 1:45 a.m.3 views

CVE-2026-8219

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS4.2AI score0.00258EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/05/10 1:45 a.m.17 views

CVE-2026-8219

DevS Palace ERP Online (up to 4.0.0) has a Cross-Site Scripting flaw in the /inventory/supplier-save function. The description notes manipulation leads to XSS and remote exploitation is possible; exploit disclosed publicly. Root cause and exact vulnerable component are not detailed beyond this, a...

4.8CVSS4.2AI score0.00258EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/10 1:30 a.m.4 views

CVE-2026-8218 Devs Palace ERP Online purchase_return_save cross site scripting

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the file /inventory/purchasereturnsave. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the...

4.8CVSS4.1AI score0.00206EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.7 views

PT-2026-39439

A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/item-save. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacte...

4.8CVSS4.2AI score0.00202EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.8 views

PT-2026-39436

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the file /inventory/purchase return save. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the...

4.8CVSS4.1AI score0.00206EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.17 views

PT-2026-39547

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/sales save. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the...

4.8CVSS4.2AI score0.00253EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.7 views

PT-2026-39437

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS4.2AI score0.00258EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.19 views

PT-2026-39546

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase save. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available...

4.8CVSS4.2AI score0.00202EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.7 views

Devs Palace ERP Online 跨站脚本漏洞

Devs Palace ERP Online is a cloud-based enterprise resource planning and business management system developed by Devs Palace. Versions of Devs Palace ERP Online 4.0.0 and earlier contained a cross-site scripting vulnerability. This vulnerability originated from an unknown function in the file...

4.8CVSS5.5AI score0.00206EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.4 views

Devs Palace ERP Online 跨站脚本漏洞

Devs Palace ERP Online is a cloud-based enterprise resource planning and business management system developed by Devs Palace. Versions of Devs Palace ERP Online 4.0.0 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from an unknown function in the...

4.8CVSS5.6AI score0.00258EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.6 views

Devs Palace ERP Online 跨站脚本漏洞

Devs Palace ERP Online is a cloud-based enterprise resource planning and business management system developed by Devs Palace. Versions of Devs Palace ERP Online 4.0.0 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from an unknown function in the...

4.8CVSS5.6AI score0.00202EPSS
Exploits0References1
Rows per page
Query Builder