Vulnerabilities in Webkul
52 resultsCVE-2026-110229MEDIUMQloApps through 1.7.0 Missing Hotel Access Restriction in Credit SlipsEPSS 0.3%CVE-2026-110226MEDIUMQloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type CreationEPSS 0.3%CVE-2026-110221MEDIUMQloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact ValueEPSS 0.2%CVE-2026-103589MEDIUMQloApps through 1.7.0 Reflected XSS via Room Type EditorEPSS 0.2%CVE-2026-103587MEDIUMQloApps through 1.7.0 Reflected XSS via Book Now Search ParametersEPSS 0.2%CVE-2026-115326MEDIUMQloApps through 1.7.0 IDOR via OrderDetailController Refund RequestEPSS 0.2%CVE-2026-103588MEDIUMQloApps through 1.7.0 Reflected XSS via exceptions fieldEPSS 0.2%CVE-2026-111284MEDIUMAureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action ModalEPSS 0.2%CVE-2026-97062MEDIUMAureus ERP 1.6.0 Stored XSS via SVG File UploadEPSS 0.2%CVE-2026-109393MEDIUMQloApps through 1.7.0 Insecure Direct Object Reference in Back-Office AJAX HandlersEPSS 0.2%CVE-2026-103590MEDIUMQloApps through 1.7.0 Reflected XSS via Length of Stay FieldsEPSS 0.2%CVE-2026-121733LOWBagisto before 2.4.5 Stored XSS via RMA Conversation Attachment UploadEPSS 0.2%