Skip to content
OpenAdvisories

Vendor

iteras

3 known vulnerabilities.

Products

ITERAS 2 Peppol-py 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-4078

    ITERAS <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The ITERAS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes (iteras-ordering, iteras-signup, iteras-paywall-login, iteras-selfservice) in all versions up to and including 1.8.2. This is due to insufficient input saniti…

    iteras ITERAS Web / CMS
  • Medium 5.0
    CVE-2025-66371

    Peppol-py is vulnerable to XXE attacks due to Saxon configuration

    Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host.

    iteras Peppol-py peppol-py PyPI