Threats tagged 'ghsa-26gm-rrp5-38p4'

A cross-site scripting (XSS) vulnerability exists in Devs Palace ERP Online up to version 4.0.0 in an unknown function within the /inventory/purchase_return_save file. The vulnerability can be exploited remotely and requires user interaction with high privileges. Public exploit code is available, but the vendor has not responded or issued a fix. The CVSS score is low, reflecting limited impact.