Cups Easy cross-site scripting vulnerability (CNVD-2024-12236)

Cups Easy is a PHP-based purchasing and inventory software that may become a full-fledged ERP in the future. Cups Easy suffers from a cross-site scripting vulnerability that stems from insufficient escaping of the taxcodeid parameter on the /cupseasylive/taxcodecreate.php page. An attacker could...