Vulnerabilities

TI-2025-40301 CVE-2025-65233 · GHSA-rv7f-hx39-7fg6

Reflected cross-site scripting (XSS) in SLiMS (slims9_bulian) before 9.6.0 via improper…

MEDIUM 60

Reflected cross-site scripting (XSS) in SLiMS (slims9_bulian) before 9.6.0 via improper handling of $_SERVER['PHP_SELF' ] in index.php/sysconfig.inc.php, which allows remote attackers to execute arbitrary JavaScript in a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00224 Published 2025-12-17 No fix listed CWE-79

TI-2023-09850 CVE-2023-24086 · GHSA-ph69-2g86-m63g

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS)…

MEDIUM 60

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /customs/loan_by_class.php?reportView.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00473 Published 2023-02-13 No fix listed CWE-79

TI-2018-09088 CVE-2018-12658 · GHSA-gxwc-h2rw-2c59

Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia…

LOW 29

Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stock_take/index.php?keywords= URI.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00844 Published 2018-06-22 No fix listed CWE-79

Vulnerabilities

Filters

Reflected cross-site scripting (XSS) in SLiMS (slims9_bulian) before 9.6.0 via improper…

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS)…

Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia…