Threats tagged 'ghsa-q56x-97x3-xhxv'

1 threat

Threats tagged 'ghsa-q56x-97x3-xhxv'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.2%	CVE-2026-104475idurar-erp-crm · Cross-site Scripting Medium5.1EPSS 0.2%2026-10-02CVE Database V5CVE-2026-104475 IDURAR ERP CRM versions up to 4.1.1 contain a stored cross-site scripting (XSS) vulnerability. Authenticated users can upload SVG files containing malicious JavaScript via profile update or settings upload endpoints. These scripts execute in the browsers of other users when the SVGs are served from the /public route. The vulnerability has a medium severity with a CVSS 4.0 score of 5.1. EPSS 0.2%Vulnerability idurar #ghsa-q56x-97x3-xhxv	CVE Database V5	2026-10-02

Showing 1–1 of 1 result