Skip to content
OpenAdvisories

Vendor

Stel Order

2 known vulnerabilities.

Products

Stel Order 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-5790

    Stored Cross-Site Scripting (XSS) vulnerability in Stel Order

    Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and earlier, located at the ‘/app/FrontController’ endpoint via the ‘legalName’ and ‘employeeID’ parameters. The lack of proper input sanitization allows an attacker to inject malicious code that is pers…

    Stel Order Stel Order