Skip to content
OpenAdvisories

Vendor

Priority

23 known vulnerabilities.

Products

Portal Generator addon to Priority ERP (developed by Soft Solutions) 9 Web 5 Priority 4 Priority web 2 Priority for Windows 1 PRI WEB Portal Add-On for Priority ERP on prem 1 PRI WEB 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-59502

    Priority - CWE-203: Observable Discrepancy

    : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

    Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)
  • Medium 4.8
    CVE-2025-55064

    Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

    CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

    Priority Web
  • Medium 4.8
    CVE-2025-55063

    Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

    CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

    Priority Web
  • Medium 4.8
    CVE-2025-55062

    Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

    CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

    Priority Web
  • Medium 6.1
    CVE-2025-55060

    Priority - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

    CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

    Priority Web
  • Medium 4.4
    CVE-2024-41699

    Priority – CWE-552: Files or Directories Accessible to External Parties

    Priority – CWE-552: Files or Directories Accessible to External Parties

    Priority Priority
  • Medium 4.3
    CVE-2024-41698

    Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    Priority Priority
  • Medium 6.1
    CVE-2024-41697

    Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    Priority Priority
  • Medium 5.5
    CVE-2022-23173

    Priority - Priority web Insecure direct object references (IDOR)

    this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" then he can see in this menu all the functionality of the application. If the attacker will try to cl…

    Priority Priority web
  • Medium 5.5
    CVE-2022-23172

    Priority - Priority User Enumeration

    An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user. This way you can verify which users are in the system and which are not.

    Priority Priority