admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-23058.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

835 B
Raw Permalink Blame History

CVE-2022-23058

Description

ERPNext in versions v12.0.9-v13.0.3 are affected by a stored XSS vulnerability that allows low privileged users to store malicious scripts in the ‘username’ field in ‘my settings’ which can lead to full account takeover.

POC

Reference

Github

No PoCs found on GitHub currently.