Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-10539 EUVD-2024-32905GHSA-wx4c-v69w-275w

Reflected XSS in Uyumsoft's ERP

Published Jan 23, 2025 · Updated Jun 2, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uyumsoft Informatin Systems Uyumsoft ERP allows XSS Using Invalid Characters, Reflected XSS.

This issue affects Uyumsoft ERP: before Erp4.2109.166p45.

Affected products

VendorProductAffectedFixed
Uyumsoft Informatin Systems Uyumsoft ERP < Erp4.2109.166p45 Erp4.2109.166p45

References