VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Feb 11, 2026· Updated Jun 17, 2026

CVE-2019-25312

CVE-2019-25312

Description

InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated attackers to inject malicious scripts. Attackers can submit comments with JavaScript payloads that execute in other users' browsers, potentially stealing cookies and session information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Inoideas/Inoerp2 versions
    cpe:2.3:a:inoideas:inoerp:0.7.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:inoideas:inoerp:0.7.2:*:*:*:*:*:*:*
    • (no CPE)range: 0.7.2
  • InoERP/InoERPllm-fuzzy
    Range: <0.7.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.