CVE-2026-61804

myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, Product Artikel and Category management store the name parameter without adequate backend sanitization and render raw database strings through unescaped Blade output in dynamic table cells, including...

CVE-2026-61804

The myTinyWMS warehouse management system (versions prior to 1.6.4 ) is vulnerable to Stored Cross-Site Scripting (XSS) within the Product (Artikel) and Category management modules. The root cause is the lack of backend sanitization for the name parameter, which is subsequently rendered as unesca...

CVE-2026-61804 myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management

myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, Product Artikel and Category management store the name parameter without adequate backend sanitization and render raw database strings through unescaped Blade output in dynamic table cells, including...

EUVD-2026-114254

myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, Product Artikel and Category management store the name parameter without adequate backend sanitization and render raw database strings through unescaped Blade output in dynamic table cells, including...

CVE-2026-61804: myTinyWMS: myTinyWMS is a free, open-source warehouse management system

myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, Product Artikel and Category management store the name parameter without adequate backend sanitization and render raw database strings through unescaped Blade output in dynamic table cells, including...

PT-2026-133717

myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, Product Artikel and Category management store the name parameter without adequate backend sanitization and render raw database strings through unescaped Blade output in dynamic table cells, including...

CVE-2026-100882

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.labe...

CVE-2026-100882 Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.labe...

CVE-2026-100882

A cross-site scripting (XSS) vulnerability exists in Krayin laravel-crm versions up to 2.2.5 . The flaw is located within the Admin Settings Endpoint , specifically involving an unknown function in the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php. An attacker ...

CVE-2026-100882 Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.labe...

CVE-2026-100882: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.labe...

CVE-2024-37621

StrongShop v1.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the component /shippingOptionConfig/index.blade.php...

CVE-2024-37621

StrongShop v1.0 is vulnerable to a Server-Side Template Injection (SSTI) vulnerability within the /shippingOptionConfig/index.blade.php component. This flaw is associated with CWE-1336 (Improper Neutralization of Special Elements Used in a Template Engine) and CWE-97 (Improper Neutralization of S...

CVE-2024-37619

StrongShop v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the specgroupid parameter at /spec/index.blade.php...

CVE-2024-37621: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

StrongShop v1.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the component /shippingOptionConfig/index.blade.php...

CVE-2024-37619: Improper Neutralization of Input During Web Page Generation

StrongShop v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the specgroupid parameter at /spec/index.blade.php...