Search vulnerabilities

Results 1

Export CSV
CVE-2020-37022

OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products