2 matches found
CVE-2023-39708: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...
6.1CVSS6.6AI score0.0064EPSS
SaveExploits1References2
Inventory Management System 跨站脚本漏洞
Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free and Open Source Inventory Management System v1.0 that could allow an attacker to execute arbitrary web script or HTML by injecting a crafted payload into the Ad...
6.1CVSS6.6AI score0.0064EPSS
SaveExploits1References3
20