CVE-2023-5989

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

CVE-2023-5989 Stored XSS in Uyumsoft ERP

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

CVE-2023-5989

CVE-2023-5989 describes a Stored XSS in Uyumsoft Information System and Technologies’ LioXERP (versions prior to v.146). The root cause is improper neutralization of input during web page generation , allowing an authenticated user to inject scripts that are stored and later executed. Affected pr...