Read the docs

Stel Order

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Stel Order records in CISA KEV

No Stel Order vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-05079 CVE-2026-5798 · GHSA-q39g-q5qr-xx67

Unsafe Object Reference (IDOR) vulnerability in Stel Order

Priority LOW 37

Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00207 Published 2026-05-14 No fix listed CWE-639
TI-2026-05071 CVE-2026-5790 · GHSA-vjqx-vf5x-gc8m

Stored Cross-Site Scripting (XSS) vulnerability in Stel Order

Priority LOW 29

Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and earlier, located at the ‘/app/FrontController’ endpoint via the ‘legalName’ and ‘employeeID’ parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00258 Published 2026-05-14 No fix listed CWE-79
Open these records in search →