Threats tagged 'ghsa-fh7r-pr96-fhc8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-8221Devs Palace ERP Online · Cross-site Scripting Medium4.82026-05-10GCVE DatabaseCVE-2026-8221 A cross-site scripting (XSS) vulnerability exists in Devs Palace ERP Online up to version 4.0.0 in the /inventory/item-save file. This flaw allows remote attackers to perform script injection. The vendor was notified but did not respond, and public exploit code has been published. The vulnerability has a low CVSS score of 2.4. Report on CVE-2026-8221 Vulnerability CWE-79 #ghsa-fh7r-pr96-fhc8	GCVE Database	2026-05-10

Page 1 of 1