An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00331·Published 2023-12-21·Fixed in v.146CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00331·Published 2023-12-21·Fixed in v.146CWE-79