Vulnerabilities in ITERAS
3 resultsCVE-2025-66371MEDIUMPeppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read EPSS 0.3%CVE-2026-4078MEDIUMITERAS <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.3%CVE-2024-53710HIGHWordPress ITERAS plugin <= 1.8.0 - CSRF to Stored XSS vulnerabilityEPSS 0.2%