Advisories · Technology
Webkul Aureus ERP.
Every CVE that names Webkul Aureus ERP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
Webkul Aureus ERP UserForm.php weak password
- Webkul Aureus ERP
- Hard-coded credentials
- CVSS 6.9 Medium
Webkul Aureus ERP composer.json insertion of sensitive information into debugging code
- Webkul Aureus ERP
- Information disclosure
- CWE-215
- CVSS 5.1 Medium
Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal
- Webkul Aureus ERP
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL
- Webkul Aureus ERP
- Broken access control
- CVSS 5.1 Medium
Aureus ERP 1.6.0 Stored XSS via SVG File Upload
- Webkul Aureus ERP
- Cross-site scripting (XSS)
- CVSS 8.6 High
Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel
- Webkul Aureus ERP
- Broken access control
- CVSS 5.1 Medium
Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log
- Webkul Aureus ERP
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Aureus ERP through 1.6.0 Stored XSS via Payment Term Note
- Webkul Aureus ERP
- Cross-site scripting (XSS)