Executive brief
NotrinosERP Cross-site Scripting vulnerability
Affected products
- Packagist notrinos/notrinos-erp
Junglewise Threat Intelligence
CVE-2022-2871: NotrinosERP Cross-site Scripting vulnerability
CVE-2022-2871 · Severity: low · CVSS 3.1 · Published 2022-08-18
Technologies: notrinos/notrinos-erp (Packagist). Vendors: Packagist.
Related threats
- NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file)
- NotrinosERP arbitrary file upload in HRM employee documents
- NotrinosERP vulnerable to SQL Injection
- Missing password strength check in notrinos/notrinos-erp
- Exposure of password hashes in notrinos/notrinos-erp