CVE-2026-24415

CVE-2026-24415: OpenSTAManager Affected by XSS in modificaiva.php via righe parameter Overview Field| Details ---|--- CVE ID| CVE-2026-24415 Severity| MEDIUM Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: " The $GET'righe' parameter is...

CVE-2026-24415 OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter

OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contains Reflected XSS vulnerabilities in invoice/order/contract modification modals. The application fails to properly sanitize user-supplied input from the righe GET...

CVE-2026-24415

CVE-2026-24415 affects OpenSTAManager v2.9.8 and earlier, exposing multiple modules (contratti, preventivi, fatture, ddt, ordini, interventi) to Reflected XSS via the GET parameter righe in the modifica_iva.php modals. The vulnerability echoes $_GET['righe'] directly into HTML value attributes wi...