CVE-2018-12658

Reflected Cross-Site Scripting (XSS) vulnerability in SLiMS 8 Akasia 8.3.1 Stock Take module. The issue occurs in the admin/modules/stock_take/index.php?keywords= parameter, allowing XSS via user-controlled URI input. Connected sources consistently describe this entry as a Stock Take module XSS i...

CVE-2023-24086

SLIMS v9.5.2 is affected by a reflected Cross-Site Scripting (XSS) vulnerability in the component /customs/loan_by_class.php?reportView. The CVE-2023-24086 entry notes a reflected XSS with CVSS v3.1 properties: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, indicating a network-exposed vulnerability requir...

CVE-2025-65233

Reflected cross-site scripting (XSS) is present in SLiMS (slims9_bulian) versions prior to 9.6.0 . The vulnerability is caused by the improper handling of the $_SERVER['PHP_SELF'] variable within the index.php/sysconfig.inc.php file. This flaw allows a remote attacker to execute arbitrary JavaScr...