Skip to content
OpenAdvisories
Medium · 6.1 CVE-2023-5989 EUVD-2023-58256GHSA-hf39-9g29-9q2w

Stored XSS in Uyumsoft ERP

Published Dec 21, 2023 · Updated May 20, 2026 · Assigned by TR-CERT

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS.

This issue affects LioXERP: before v.146.

Affected products

VendorProductAffectedFixed
Uyumsoft Information System and Technologies LioXERP < v.146 v.146

References