Threats tagged 'ghsa-v5h9-qhjf-j7x7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-8255Devs Palace ERP Online · Cross-site Scripting Medium4.82026-05-11GCVE DatabaseCVE-2026-8255 A cross-site scripting (XSS) vulnerability has been identified in Devs Palace ERP Online versions up to 4.0.0. The issue exists in an unspecified part of the /inventory/add_new_customer file and can be exploited remotely. Public exploit code is available. The vendor has not responded to the disclosure. The vulnerability has a low CVSS score of 2.4. Report on CVE-2026-8255 Vulnerability CWE-79 #ghsa-v5h9-qhjf-j7x7	GCVE Database	2026-05-11

Page 1 of 1