CVE-2023-5989

CVE-2023-5989 describes a Stored XSS in Uyumsoft Information System and Technologies’ LioXERP (versions prior to v.146). The root cause is improper neutralization of input during web page generation , allowing an authenticated user to inject scripts that are stored and later executed. Affected pr...

CVE-2023-5988

CVE-2023-5988 is a Reflected XSS in Uyumsoft LioXERP prior to v1.46. The root cause is improper neutralization of input during web page generation, allowing reflected script execution. Affected: LioXERP versions before 146. Remediation: upgrade to version 146 or later (per PT-Security guidance pr...