Vulnerabilidades em Webkul

52 resultados
Análise Vexday

Webkul registra 11 vulnerabilidades no histórico, com 3 divulgações nos últimos 90 dias, indicando atividade moderada de descobertas. Nenhuma vulnerabilidade está sob ataque ativo (KEV), reduzindo o risco imediato, embora 2 sejam críticas; a fraqueza dominante é XSS (CWE-79), típica de aplicações web e potencialmente explorada em massa. O fornecedor requer monitoramento contínuo, mas não apresenta urgência crítica no momento.

CVE-2026-110229MEDIUMQloApps through 1.7.0 Missing Hotel Access Restriction in Credit SlipsEPSS 0.3%CVE-2026-110226MEDIUMQloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type CreationEPSS 0.3%CVE-2026-110221MEDIUMQloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact ValueEPSS 0.2%CVE-2026-103589MEDIUMQloApps through 1.7.0 Reflected XSS via Room Type EditorEPSS 0.2%CVE-2026-103587MEDIUMQloApps through 1.7.0 Reflected XSS via Book Now Search ParametersEPSS 0.2%CVE-2026-115326MEDIUMQloApps through 1.7.0 IDOR via OrderDetailController Refund RequestEPSS 0.2%CVE-2026-103588MEDIUMQloApps through 1.7.0 Reflected XSS via exceptions fieldEPSS 0.2%CVE-2026-111284MEDIUMAureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action ModalEPSS 0.2%CVE-2026-97062MEDIUMAureus ERP 1.6.0 Stored XSS via SVG File UploadEPSS 0.2%CVE-2026-109393MEDIUMQloApps through 1.7.0 Insecure Direct Object Reference in Back-Office AJAX HandlersEPSS 0.2%CVE-2026-103590MEDIUMQloApps through 1.7.0 Reflected XSS via Length of Stay FieldsEPSS 0.2%CVE-2026-121733LOWBagisto before 2.4.5 Stored XSS via RMA Conversation Attachment UploadEPSS 0.2%