Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2026/05/11 8:27 p.m.•23 views

CVE-2026-8219

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS4.2AI score0.0035EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/10 3:33 a.m.•25 views

EUVD-2026-28955

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS4.2AI score0.0035EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/10 2:16 a.m.•39 views

CVE-2026-8219

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS0.0035EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/10 1:45 a.m.•16 views

CVE-2026-8219

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS4.2AI score0.0035EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/10 1:45 a.m.•19 views

CVE-2026-8219 Devs Palace ERP Online supplier-save cross site scripting

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS3.8AI score0.0035EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/10 1:45 a.m.•63 views

CVE-2026-8219 Devs Palace ERP Online supplier-save cross site scripting

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS0.0035EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/10 1:45 a.m.•48 views

CVE-2026-8219

DevS Palace ERP Online (up to 4.0.0) has a Cross-Site Scripting flaw in the /inventory/supplier-save function. The description notes manipulation leads to XSS and remote exploitation is possible; exploit disclosed publicly. Root cause and exact vulnerable component are not detailed beyond this, a...

4.8CVSS3.8AI score0.0035EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/10 12:00 a.m.•25 views

PT-2026-39437

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS4.2AI score0.0035EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/10 12:00 a.m.•21 views

Devs Palace ERP Online 跨站脚本漏洞

Devs Palace ERP Online is a cloud-based enterprise resource planning and business management system developed by Devs Palace. Versions of Devs Palace ERP Online 4.0.0 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from an unknown function in the...

4.8CVSS5.6AI score0.0035EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/10 12:00 a.m.•7 views

CVE-2026-8219: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

4.8CVSS3.6AI score0.0035EPSS
SaveExploits0References3
Rows per page
Query Builder