Vulnerabilities CVE-2026-8221

CVE-2026-8221

Medium

Open

TLP:CLEAR

Devs Palace ERP Online item-save cross site scripting

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/item-save. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Details

CVSS Score: 4.8
EPSS Score ⓘ: 0.20%

10.3th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Confidence: 90%
Published: May 10, 2026
Last Modified: May 10, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.