EUVD-2026-112557

A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad931c218140df4fb23809d4fab. This vulnerability affects unknown code of the file addlist.php of the component Add Product Page. Such manipulation of the argument product name lead...

CVE-2026-118585

A cross-site scripting (XSS) vulnerability exists in the Add Product Page component of configuroweb inventariobasico (specifically within the addlist.php file). The flaw is caused by the improper handling of the product name argument, allowing for remote attacks. While the exploit is publicly ava...