7.1
Élevée
CVE-2024-47640 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP ERP…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP ERP erp allows Reflected XSS.This issue affects WP ERP: from n/a through <= 1.13.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP ERP 1.13 | premières → 1.13.2 | Pas de correctif indiqué |
Autres CVE de WP ERP
Les 11 CVE de WP ERP →
CVE-2026-25448
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control…
4.3
Moyenne
CVE-2026-96346
Author SQL Injection in WP ERP <= 1.17.9 versions
7.6
Élevée
CVE-2026-96343
Custom role PHP Object Injection in WP ERP <= 1.17.9 versions
7.2
Élevée
CVE-2026-59522
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions
6.5
Moyenne