Threats tagged 'ghsa-r9xw-wmrc-hvjc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-8256Devs Palace ERP Online · Cross-site Scripting Medium4.82026-05-11GCVE DatabaseCVE-2026-8256 A cross-site scripting (XSS) vulnerability exists in Devs Palace ERP Online up to version 4.0.0 in the /accounts/mr-save file. This vulnerability allows remote attackers to perform XSS attacks. The vulnerability has been publicly disclosed, but the vendor has not responded or provided a fix. The CVSS score is low, reflecting limited impact. Report on CVE-2026-8256 Vulnerability CWE-79 #ghsa-r9xw-wmrc-hvjc	GCVE Database	2026-05-11

Page 1 of 1