Skip to content
OpenAdvisories

Vendor

idurar

4 known vulnerabilities.

Products

idurar-erp-crm 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-104475

    IDURAR ERP CRM through 4.1.1 Stored XSS via SVG Upload

    IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers can upload JavaScript-laden SVGs via the profile update or settings upload endpoi…

    idurar idurar-erp-crm