EUVD-2023-58256

Malicious code in bioql PyPI...

CVE-2023-5988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...

CVE-2023-5989

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Stored XSS.This issue affects LioXERP: before v.146...

CVE-2023-5989

CVE-2023-5989 describes a Stored XSS in Uyumsoft Information System and Technologies’ LioXERP (versions prior to v.146). The root cause is improper neutralization of input during web page generation , allowing an authenticated user to inject scripts that are stored and later executed. Affected pr...

CVE-2023-5988

CVE-2023-5988 is a Reflected XSS in Uyumsoft LioXERP prior to v1.46. The root cause is improper neutralization of input during web page generation, allowing reflected script execution. Affected: LioXERP versions before 146. Remediation: upgrade to version 146 or later (per PT-Security guidance pr...