CVE-2022-42989

ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting XSS vulnerability via the component Caixa de Entrada...

Cross site scripting

ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting XSS vulnerability via the component Caixa de Entrada...

CVE-2022-42989

ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting XSS vulnerability via the component Caixa de Entrada...

CVE-2022-42989

ERP Sankhya before v4.11b81 is affected by CVE-2022-42989, a cross-site scripting (XSS) in the Caixa de Entrada component. The vulnerability allows injection of HTML/JavaScript via the Caixa de Entrada messaging feature, enabling potential account takeover and exposure of sensitive data. The CVSS...