Threats tagged 'ghsa-4px6-q9qm-gpx4'

CVE-2026-8253 is a cross-site scripting (XSS) vulnerability in Devs Palace ERP Online affecting an unknown functionality in the /inventory/purchase_save file. The vulnerability exists in versions up to 4.0.0 and can be exploited remotely. Public exploit code is available. The vendor was contacted but did not respond or provide a fix. The CVSS score is low (2.4) with low impact on integrity and no impact on confidentiality or availability.