TI-2022-20770 CVE-2022-42753 · GHSA-4cm4-r3q9-95wh
Cross-site scripting in SalonERP
Priority MEDIUM 60
SalonERP version 3.0.2 allows an external attacker to steal the cookie of arbitrary users.
Salonerp Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Salonerp Project records in CISA KEVNo Salonerp Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2021-20513 CVE-2021-45406 · GHSA-xhxm-v6fm-53p3
In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload…
Priority MEDIUM 42
In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query while generating a report.