Threats tagged 'ghsa-w263-9cg4-874f'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-8220Devs Palace ERP Online · Cross-site Scripting Medium4.82026-05-10GCVE DatabaseCVE-2026-8220 A cross-site scripting (XSS) vulnerability exists in Devs Palace ERP Online versions up to 4.0.0 in the /inventory/customer-save endpoint. The vulnerability allows remote attackers to inject malicious scripts. The vendor has not responded to disclosure attempts, and public exploit code is available. The CVSS score is low (2.4), indicating limited impact. Report on CVE-2026-8220 Vulnerability CWE-79 #ghsa-w263-9cg4-874f	GCVE Database	2026-05-10

Page 1 of 1