Vulnerabilities

TI-2026-21373 CVE-2026-26725 · GHSA-h93r-xq5m-hv3w

An issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 (fixed in 19.76) allows…

MEDIUM 49

An issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 (fixed in 19.76) allows a remote attacker to escalate privileges via the AccessID parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00495 Published 2026-02-20 No fix listed CWE-269

TI-2025-38023 CVE-2025-61550 · GHSA-p898-wg6q-9r89

Cross-Site Scripting (XSS) is present on the ctl00_Content01_fieldValue parameters on the…

MEDIUM 58

Cross-Site Scripting (XSS) is present on the ctl00_Content01_fieldValue parameters on the /psp/appNet/TemplateOrder/TemplatePreview.aspx endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 1…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00228 Published 2026-01-08 No fix listed CWE-79

TI-2025-38022 CVE-2025-61549 · GHSA-xp5p-5cr9-v76h

Cross-Site Scripting (XSS) is present on the LoginID parameter on the…

MEDIUM 60

Cross-Site Scripting (XSS) is present on the LoginID parameter on the /PSP/app/web/reg/reg_display.asp endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.76).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00255 Published 2026-01-08 No fix listed CWE-79

TI-2025-38021 CVE-2025-61548 · GHSA-82hr-pf96-mj72

SQL Injection is present on the hfInventoryDistFormID parameter in the…

HIGH 82

SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.69).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00551 Published 2026-01-08 No fix listed CWE-89

TI-2025-38020 CVE-2025-61547 · GHSA-cxh9-hv5q-j837

Cross-Site Request Forgery (CSRF) is present on all functions in edu Business Solutions…

MEDIUM 63

Cross-Site Request Forgery (CSRF) is present on all functions in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.76).

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.0018 Published 2026-01-08 No fix listed CWE-352

TI-2025-38019 CVE-2025-61546 · GHSA-9v6r-6rm8-hx38

There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu…

HIGH 80

There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.69) that enables remote attacker to create financial discrepancies…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00541 Published 2026-01-08 No fix listed CWE-20