Skip to content
OpenAdvisories

Vendor

thexerteproject

5 known vulnerabilities.

Products

xerteonlinetoolkits 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-41459 Public exploit

    Xerte Online Toolkits Path Disclosure via /setup

    Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side filesystem path of the application root. Attackers can send a GET request to the /setup page…

    thexerteproject xerteonlinetoolkits