bgERP 22.31 Cross Site Scripting

Title: bgERP v22.31 Orlovets - Cookie Session vulnerability & Cross-Site Scripting XSS Author: nu11secur1ty Date: 01.31.2023 Vendor: https://bgerp.com/Bg/Za-sistemata Software: https://github.com/bgerp/bgerp/releases/tag/v22.31 Reference:...

bgERP v22.31 (Orlovets) - Cookie Session vulnerability & Cross-Site Scripting (XSS)

Title: bgERP v22.31 Orlovets - Cookie Session vulnerability & Cross-Site Scripting XSS Author: nu11secur1ty Date: 01.31.2023 Vendor: https://bgerp.com/Bg/Za-sistemata Software: https://github.com/bgerp/bgerp/releases/tag/v22.31 Reference:...

bgERP v22.31 (Orlovets) - Cookie Session vulnerability / Cross-Site Scripting Vulnerabilities

Title: bgERP v22.31 Orlovets - Cookie Session vulnerability & Cross-Site Scripting XSS Author: nu11secur1ty Vendor: https://bgerp.com/Bg/Za-sistemata Software: https://github.com/bgerp/bgerp/releases/tag/v22.31 Reference:...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

Cross site scripting

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

CVE-2023-25241 affects bgERP v22.31 and is a reflected cross-site scripting (XSS) vulnerability exploitable via the Search parameter. The issue is categorized as CVSS v3.1 with base score 6.1 (Medium), with Network attack vector, no privileges required, user interaction required, and a changed sc...