CVE-2018-12658

Reflected Cross-Site Scripting (XSS) vulnerability in SLiMS 8 Akasia 8.3.1 Stock Take module. The issue occurs in the admin/modules/stock_take/index.php?keywords= parameter, allowing XSS via user-controlled URI input. Connected sources consistently describe this entry as a Stock Take module XSS i...

CVE-2023-24086

SLIMS v9.5.2 is affected by a reflected Cross-Site Scripting (XSS) vulnerability in the component /customs/loan_by_class.php?reportView. The CVE-2023-24086 entry notes a reflected XSS with CVSS v3.1 properties: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, indicating a network-exposed vulnerability requir...

CVE-2025-65233

CVE-2025-65233 affects SLiMS (slims9_bulian) prior to 9.6.0. The vulnerability is a reflected XSS in index.php/sysconfig.inc.php caused by improper handling of $_SERVER['PHP_SELF'], allowing remote attackers to trigger arbitrary JavaScript in victims’ browsers via a crafted URL path. Data in conn...